Medium
CVE-2023-5659
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-47189
Defender Security <= 4.2.0 - Masked Login Area Security Feature Bypass
Medium
CVE-2023-23702
Comments Ratings <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5703
Gift Up Gift Cards for WordPress and WooCommerce <= 2.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47190
Apollo13 Framework Extensions <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47227
Social Feed | All social media in one place <= 1.5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting]
Medium
CVE-2023-47223
Basic Interactive World Map <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47226
Post Sliders & Post Grids <= 1.0.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-47236
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-47188
Simple Job Board <= 2.10.5 - Missing Authorization
Medium
CVE-2023-47187
Animated Rotating Words <= 5.4 - Missing Authorization via save_admin_options
Medium
CVE-2023-47232
WP Affiliate Disclosure <= 1.2.6 - Cross-Site Request Forgery via check_capability
Medium
CVE-2023-50899
Product Catalog Enquiry <= 5.0.2 - Missing Authorization
Medium
CVE-2023-5945
video carousel slider with lightbox 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-48284
Decorator - WooCommerce Email Customizer <= 1.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-5946
Digirisk 6.0.0.0 - Reflected Cross-Site Scripting
Medium
cf34af9d-4de7-498d-8065-c3cc6818b7c4
Advance Menu Manager <= 3.0.6 - Cross-Site Request Forgery
Medium
CVE-2023-47186
Kadence WooCommerce Email Designer <= 1.5.11 - Cross-Site Request Forgery
Medium
CVE-2023-47237
Auto Publish for Google My Business <= 3.7 - Cross-Site Request Forgery
Medium
CVE-2023-5707
SEO Slider <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
04ad816b-0ac0-44b5-928a-5bb3e36523b2
Advance Menu Manager <= 3.0.6 - Missing Authorization
Medium
CVE-2023-5606
ChatBot 4.8.6 - 4.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Medium
CVE-2023-5385
Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication
Medium
CVE-2023-5383
Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.