Medium
CVE-2023-7071
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-7070
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
f2b5213d-fdc5-4c98-9a05-15d83bd7308f
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery
Medium
CVE-2024-0187
Community by PeepSo <= 6.3.1.1 - Reflected Cross-Site Scripting
Medium
d89918e1-b525-4d32-9b11-5e014eb02c16
Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-6242
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
Critical
CVE-2023-51409
AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload
Medium
CVE-2023-6244
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings
Medium
CVE-2023-7125
Community by PeepSo <= 6.3.1.1 - Cross-Site Request Forgery to User Post Creation
Medium
66377ee2-cc87-4cfe-a4e4-cef4459bf2ec
Seraphinite Alternative Slugs Manager <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2023-6994
List category posts <= 0.89.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-6979
Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2023-6158
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
Medium
1453815d-4e28-41ec-9aa4-4fd2899c619a
Happy Elementor Addons <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6582
ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-6830
Formidable Forms <= 6.7 - HTML Injection
Medium
CVE-2024-29802
Football pool <= 2.11.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-22136
Droit Elementor Addons <= 3.1.5 - Cross-Site Request Forgery
Medium
CVE-2023-6594
WordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-25093
GD Rating System <= 3.5.0 - Unauthenticated Stored Cross-Site Scripting via IP
Medium
CVE-2024-22134
Contact Form 7 Extension For Mailchimp <= 0.5.70 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2023-52229
Word Replacer Pro <= 1.0 - Missing Authorization
Critical
CVE-2023-52215
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated SQL Injection via userToken
Medium
CVE-2024-22138
Seraphinite Accelerator <= 2.20.47 - Unauthenticated Sensitive Information Exposure via Log File
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.