Medium
CVE-2023-7204
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-1130
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via set_read()
Medium
CVE-2024-24804
MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-6389
WordPress Toolbar Plugin <= 2.2.6 - Open Redirect via wptbto
Low
CVE-2024-24710
Feed Them Social <= 4.2.0 - Cross-Site Request Forgery via review_nag_check
Medium
CVE-2024-24708
W3SPEEDSTER <= 7.19 - Cross-Site Request Forgery via launch
Medium
CVE-2023-7200
EventON <= 4.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-24717
Beds24 Online Booking <= 2.0.23 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5124
Pagelayer <= 1.7.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via Header/Footer code
Medium
CVE-2024-24713
Auto Listings <= 2.6.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-24798
Debug <= 1.10 - Cross-Site Request Forgery
Medium
CVE-2024-24706
WP-CFM <= 1.7.8 - Cross-Site Request Forgery via multiple AJAX functions
High
CVE-2023-6279
Woostify Sites Library <= 1.4.7 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2024-24702
Page Restrict <= 2.5.5 - Cross-Site Request Forgery via pr_admin_page
High
CVE-2024-23825
TablePress <= 2.2.4 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files
Medium
CVE-2024-24802
JTRT Responsive Tables <= 4.1.9 - Cross-Site Request Forgery
Medium
CVE-2024-24718
PropertyHive <= 2.0.6 - Missing Authorization via activate_pro_feature
Medium
CVE-2024-24704
Load More Anything <= 3.3.3 - Missing Authorization to Plugin Settings Modification
High
CVE-2024-1072
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 - Missing Authorization via seedprod_lite_new_lpage
Medium
CVE-2024-24719
Location Picker at Checkout for WooCommerce <= 1.8.9 - Missing Authorization via checkout_map_rules_order_ajax_handler
Critical
CVE-2024-24797
ERE Recently Viewed <= 1.3 - Unauthenticated PHP Object Injection
Medium
CVE-2024-24701
Setka Editor <= 2.1.20 - Cross-Site Request Forgery via handleRequest
Medium
CVE-2024-23524
PilotPress <= 2.0.30 - Authenticated(Subscriber+) Missing Authorization via multiple AJAX functions
Medium
CVE-2024-24709
Shareaholic <= 9.7.11 - Missing Authorization via accept_terms_of_service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.