Medium
CVE-2023-49739
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-49192
Enhanced Text Widget <= 1.6.3 - Missing Authorization via etw_hide_admin_notification_callback
Medium
CVE-2023-49193
Social Pug <= 1.30.0 - Missing Authorization via multiple admin_init actions
Medium
1ce1316b-674a-4436-968f-9ffca4e8f726
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Cross-Site Request Forgery
Medium
0b7d7b64-8194-4b81-83f5-1f3b23109455
Guest Author <= 2.3 - Authenticated Stored Cross-Site Scripting
High
CVE-2023-44989
CF7 Google Sheets Connector <= 5.0.5 - Unauthenticated Sensitive Information Exposure via Debug Log
Medium
CVE-2023-51666
Related Post <= 2.0.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6155
Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure
High
CVE-2023-6528
Slider Revolution < 6.6.19 - Authenticated (Author+) PHP Object Injection
Medium
6954364e-567c-407c-afc6-983b7257cc88
Quotes for WooCommerce <= 2.0.1 - Cross-Site Request Forgery
Medium
CVE-2023-6166
Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-51680
Quotes for WooCommerce <= 2.0.1 - Missing Authorization
Medium
CVE-2023-6449
Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2023-2439
UserPro <= 5.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-6266
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
Medium
CVE-2023-49171
Innovs HR <= 1.0.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-49181
WP Event Manager <= 3.1.41 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2023-5931
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.15 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2023-49185
Doofinder for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via tab
High
CVE-2023-5939
rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-49177
which template file <= 5.0.0 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-49184
Parallax Slider Block <= 1.2.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-49168
BP Better Messages <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-49173
10to8 Online Appointment Booking System <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.