High
CVE-2023-5504
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
dbf54852-f3fe-4c9e-9348-44a73f9a8131
WooCommerce Parcel Pro <= 1.6.11 - Cross-Site Request Forgery
Medium
CVE-2023-48277
Super Progressive Web Apps <= 2.2.21 - Missing Authorization
Medium
c146f89c-5df3-4aaf-b880-0ce6016dfb6d
GS Team Members <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-48275
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
High
CVE-2023-2497
UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection
Medium
CVE-2023-48271
Maspik – Spam blacklist <= 0.10.3 - Bypass
Medium
CVE-2023-6008
UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions
Medium
CVE-2023-48272
Maspik – Spam blacklist <= 0.9.2 - Unauthenticated Stored Cross-Site Scripting via efas_add_to_log
High
CVE-2023-6009
UserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2023-2449
UserPro <= 5.1.1 - Insecure Password Reset Mechanism
Medium
CVE-2023-47877
Perfmatters < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
b758c8a7-6220-4b54-af88-7933a530b5ba
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
Critical
CVE-2023-2437
UserPro <= 5.1.1 - Authentication Bypass to Administrator
Medium
CVE-2023-6222
Quttera Web Malware Scanner <= 3.4.1.48 - Authenticated (Administrator+) Directory Traversal via ShowFile
Medium
CVE-2023-47875
Perfmatters <= 2.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-2438
UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata
Medium
CVE-2023-2448
UserPro <= 5.1.4 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template
High
CVE-2023-2440
UserPro <= 5.1.1 - Cross-Site Request Forgery to Privilege Escalation
High
CVE-2023-6007
UserPro <= 5.1.1 - Missing Authorization via multiple functions
Medium
CVE-2023-47876
Perfmatters <= 2.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-48273
Preloader for Website <= 1.2.2 - Missing Authorization via plwao_register_settings()
Low
52d1f9a3-243e-4e2c-a752-f40b6d275121
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_delete_expired_used_coupon_code
High
CVE-2023-5348
Product Catalog Mode For WooCommerce <= 5.0.2 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.