Medium
CVE-2023-48779
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-48769
Chat Bubble <= 2.3 - Cross-Site Request Forgery via cbb_submit_settings_data
Medium
CVE-2023-48762
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery
Medium
18cbf346-91a3-4856-930e-7753eb1470d9
Chart Builder <= 1.9.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
16a3469d-6264-4ed7-b6ae-fdd7a80c8ca5
Chronopost & Mondial relay pour WooCommerce - WCMultiShipping <= 2.3.7 - Incorrect Authorization
Medium
CVE-2023-39921
Molongui <= 4.6.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-48776
Download canvasio3D Light <= 2.5.0 - Missing Authorization
Medium
CVE-2023-46086
affiliate-toolkit – WordPress Affiliate Plugin <= 3.4.3 - Reflected Cross-Site Scripting via keyword
Medium
CVE-2023-45609
Powr Pack <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-48764
WordPress Brute Force Protection – Stop Brute Force Attacks <= 2.2.5 - Authenticated (Administrator+) SQL Injection via orderby
Medium
CVE-2023-48771
File Gallery <= 1.8.5.4 - Reflected Cross-Site Scripting via post_id
Medium
CVE-2023-48752
Happyforms <= 1.25.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-41134
Antispam Bee <= 2.11.3 - IP Address Spoofing via get_client_ip
Medium
CVE-2023-48754
Delete Post Revisions In WordPress <= 4.6 - Cross-Site Request Forgery
Medium
CVE-2023-41127
Evergreen Content Poster <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-40010
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Unauthenticated SQL Injection via search terms
Medium
CVE-2023-38474
Campaign Monitor for WordPress <= 2.8.12 - Reflected Cross-Site Scripting
Medium
CVE-2023-48755
teachPress <= 9.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-6289
Swift Performance Lite <= 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export
Medium
CVE-2023-48753
Restricted Site Access <= 7.4.1 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2023-47645
RegistrationMagic <= 5.2.2.6 - Cross-Site Request Forgery
High
CVE-2023-6219
BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-41136
Simple Long Form <= 2.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-6090
Mollie Payments for WooCommerce <= 7.3.11 - Authenticated (Shop Manager+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.