Medium
3f81003b-8214-4fa3-960f-81b166623de9
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-6065
Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure
Medium
CVE-2023-5005
Autocomplete Location field Contact Form 7 <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
09773141-883b-40e3-bd20-d3115c02e023
Login Lockdown <= 2.06 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-2447
UserPro <= 5.1.1 - Cross-Site Request Forgery to Sensitive Information Exposure
Medium
CVE-2023-47841
Analytify Dashboard <= 5.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-47871
Contact Form to Any API <= 1.1.6 - Missing Authorization via delete_cf7_records()
Medium
CVE-2023-5776
Post Meta Data Manager <= 1.2.1 - Cross-Site Request Forgery to Post, Term, and User Meta Deletion
High
CVE-2023-47852
Link Whisper Free <= 0.6.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-47853
myCred <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-5469
Drop Shadow Boxes <= 1.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47874
Perfmatters <= 2.1.6 - Missing Authorization
High
CVE-2023-47846
WP Githuber MD <= 1.16.2 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2023-6091
Theme Editor <= 2.7.1 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-47847
PayTR Taksit Tablosu <= 1.3.1 - Missing Authorization
Medium
CVE-2023-47843
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Deletion
Medium
CVE-2023-6203
The Events Calendar <= 6.2.8 - Information Disclosure
Medium
CVE-2023-47850
Community by PeepSo <= 6.2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47848
Tainacan <= 0.20.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-47845
Grab & Save <= 1.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-47869
wpForo Forum <= 2.2.5 - Missing Authorization
Low
CVE-2023-5907
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal
Medium
CVE-2023-47872
wpForo Forum <= 2.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-47854
Parallax Image <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.