Medium
CVE-2023-7229
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2023-7228
illi Link Party! <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-7195
WP-Reply Notify <= 1.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-7088
Add SVG Support for Media Uploader | inventivo <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-0665
WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-0249
Advanced Schedule Posts <= 2.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-7196
Ultimate Noindex Nofollow Tool <= 1.1.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-7231
illi Link Party! <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Link Deletion
Medium
CVE-2023-5932
Travelpayouts <= 1.1.13 - Reflected Cross-Site Scripting
Medium
CVE-2023-7174
aBitGone CommentSafe <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Cross-Site Request Forgery
Medium
CVE-2023-6953
PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting
Medium
CVE-2024-0703
Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-0612
Content Views <= 3.6.2 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-0587
Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-6591
Popup Box Business (7.0.0 - 7.9.0) and Developer (20.0.0 - 20.9.0) - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-0761
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
Medium
CVE-2023-6843
easy.jobs <= 2.4.6 - Missing Authorization to Settings Update
Medium
CVE-2024-0679
ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2023-51415
GiveWP <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-23504
Ninja Tables <= 5.0.5 - Missing Authorization
Medium
CVE-2023-6082
Chartjs <= 2023.2 - Authenticated(Editor+) Stored Cross-Site Scripting via chart
Medium
CVE-2023-4637
WPvivid <= 0.9.94 - Missing Authorization
Critical
CVE-2024-0709
Cryptocurrency Widgets – Price Ticker & Coins List 2.0 - 2.6.5 - Unauthenticated SQL Injection
Medium
CVE-2024-22308
Simple Membership <= 4.4.1 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.