Medium
CVE-2023-6327
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-4158
Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-4150
Simple Basic Contact Form <= 20221201 - Reflected Cross-Site Scripting
Medium
CVE-2024-34377
Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery <= 1.5.3 - Missing Authorization
Medium
CVE-2023-7065
Stop Spammers Security | Block Spam Users, Comments, Forms <= 2024.4 - Cross-Site Request Forgery (CSRF) via sfs_process
High
CVE-2024-34370
EAN for WooCommerce <= 4.8.9 - Authenticated (Shop Manager+) Arbitrary Options Update
Medium
CVE-2024-3237
ConvertPlug <= 3.5.25 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Medium
CVE-2024-3918
Pet Manager <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-3070
Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-3917
Pet Manager <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-3991
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id
Medium
CVE-2024-3920
Flattr <= 1.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4433
Simple Image Popup <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4107
Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-2220
Button contact VR <= 4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3280
Follow Us Badges <= 3.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsite_follow_us_badges Shortcode
Medium
CVE-2024-2273
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-4033
All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image
Medium
CVE-2024-4324
WP Video Lightbox <= 1.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Medium
CVE-2024-5026
CM Tooltip Glossary <= 4.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4036
Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1173
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL Injection
Medium
CVE-2024-3490
WP Recipe Maker <= 9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wprm-recipe-roundup-item Shortcode
Medium
CVE-2024-3649
Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.