Medium
CVE-2023-47557
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
f3d5bc99-2b55-4e19-8304-e56f3d4a2f1a
Ecwid Ecommerce Shopping Cart <= 6.12.3 - Missing Authorization on multiple functions
Medium
eb94520e-a99d-4e34-b174-e01898de0978
Custom post types <= 4.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47547
Products, Order & Customers Export for WooCommerce <= 2.0.10 - Reflected Cross-Site Scripting via date parameters
Medium
CVE-2023-47660
Product Visibility by Country for WooCommerce <= 1.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47659
Lava Directory Manager <= 1.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47531
Droit Dark Mode <= 1.1.2 - Cross-Site Request Forgery
Medium
CVE-2023-5982
UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update
Medium
CVE-2023-5006
WP Discord Invite < 2.5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-47520
Responsive Column Widgets <= 1.2.7 - Reflected Cross-Site Scripting via tab
Medium
CVE-2023-47523
Auto Tag Creator <= 1.0.2 - Missing Authorization via tag_save_settings_callback
Medium
CVE-2023-47515
Seers <= 8.1.1 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-47244
Email Marketing for WooCommerce by Omnisend <= 1.13.8 - Sensitive Information Exposure
Medium
CVE-2023-47656
ANAC XML Bandi di Gara <= 7.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-47529
Cloud Templates & Patterns collection <= 1.2.2 - Sensitive Information Exposure via Log File
Medium
CVE-2023-47662
Live Gold Price & Silver Price Charts Widgets <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-33998
Easy Social Icons <= 3.2.4 - Missing Authorization via cnss_save_ajax_order
High
CVE-2023-32095
Rename Media Files <= 1.0.1 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2023-47533
Countdown and CountUp, WooCommerce Sales Timer <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-47553
UserHeat Plugin <= 1.1.10 - Cross-Site Request Forgery
Medium
CVE-2023-47548
Integrate Google Drive <= 1.3.2 - Open Redirect via state
Medium
CVE-2023-47243
MSHOP MY SITE <= 1.1.7 - Missing Authorization via update_settings
Medium
CVE-2023-34375
Seo By 10Web <= 1.2.9 - Reflected Cross-Site Scripting
High
CVE-2023-47669
Profile Builder <= 3.10.3 - Cross-Site Request Forgery via pms-cross-promotion.php
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.