Medium
CVE-2024-0623
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2024-22309
ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-22307
WP-Lister Lite for eBay <= 3.5.7 - Reflected Cross-Site Scripting via 's'
Medium
CVE-2023-6499
lasTunes <= 3.6.1 - Cross-Site Request Forgery
Medium
CVE-2024-23505
PDF Viewer & 3D PDF Flipbook – DearPDF <= 2.0.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-22310
Formzu WP <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0691
FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import
Medium
CVE-2023-6081
Chartjs <= 2023.2 - Authenticated(Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-23502
Posts List Designer by Category – List Category Posts Or Recent Posts <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-0221
Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename
High
CVE-2023-7063
WPForms Pro 1.8.4 - 1.8.5.3 - Unauthenticated Stored Cross-Site Scripting via Form Submission
Medium
CVE-2023-6501
Splashscreen <= 0.20 - Cross-Site Request Forgery
Medium
CVE-2023-7233
GigPress <= 2.3.29 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-6808
Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-6807
GeneratePress Premium <= 2.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom Meta
High
CVE-2024-0566
Smart Manager - WooCommerce Advanced Bulk Edit, Inventory Management & more... <= 8.27.0 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-0705
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection
Medium
CVE-2024-0699
AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url
Medium
CVE-2024-0618
Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title
Medium
CVE-2024-22291
Browser Theme Color <= 1.3 - Cross-Site Request Forgery via btc_settings_page
Medium
CVE-2023-6958
WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-6701
Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Medium
CVE-2023-6963
Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass
Medium
CVE-2023-50850
WooCommerce Subscriptions < 5.8.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.