Medium
CVE-2024-0448
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-0688
WebSub (FKA. PubSubHubbub) <= 3.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-0373
Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via save_view
Medium
CVE-2024-0668
Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_action
Medium
CVE-2024-0624
Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update
Medium
CVE-2024-0371
Views for WPForms <= 3.2.2 - Missing Authorization via create_view
Medium
CVE-2024-23506
InstaWP Connect <= 0.1.0.9 - Missing Authorization to Sensitive Information Dislcosure
Medium
CVE-2024-0617
Category Discount Woocommerce <= 4.11 - Cross-Site Request Forgery via wpcd_save_discount()
High
CVE-2023-6933
Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
High
CVE-2024-23507
InstaWP Connect <= 0.1.0.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-0370
Views for WPForms <= 3.2.2 - Missing Authorization via save_view
Medium
CVE-2024-0374
Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via create_view
Medium
CVE-2024-23508
PDF Poster - PDF Embedder Plugin for WordPress <= 2.1.17 - Reflected Cross-Site Scripting
Medium
CVE-2024-0372
Views for WPForms <= 3.2.2 - Missing Authorization via get_form_fields
High
CVE-2023-6846
File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-0625
WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class]
Medium
CVE-2023-7168
Better Follow Button for Jetpack <= 8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5529
Advanced Page Visit Counter <= 8.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-7197
Marketing Twitter Bot <= 1.11 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
Medium
CVE-2023-7230
illi Link Party! <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6783
WolfNet IDX for WordPress <= 1.19.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-7029
WordPress Button Plugin MaxButtons <= 9.7.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-6697
WP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting
Medium
CVE-2023-7086
SVG Uploads Support <= 2.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.