Medium
CVE-2023-5161
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-4937
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Medium
CVE-2023-3746
ActivityPub <= 0.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
Medium
CVE-2023-4919
iframe <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode
Low
CVE-2023-4933
WP Job Openings <= 3.4.2 - Information Exposure
Medium
CVE-2023-4940
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Medium
CVE-2023-4943
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4942
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Low
CVE-2023-4505
Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback
Medium
CVE-2023-4805
Tutor LMS <= 2.2.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-51520
Booking Calendar <= 9.7.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
High
CVE-2023-4506
Active Directory Integration / LDAP Integration <= 4.1.9 - Sensitive Information Exposure
Medium
a961d30e-f2cb-458d-8f1a-18f6e769efbc
WP Discord Invite <= 2.4.1 - Reflected Cross-Site Scripting via webhook
Medium
CVE-2023-44147
Comment Blacklist Updater <= 1.1.0 - Cross-Site Request Forgery via update_blacklist_manual
Medium
CVE-2023-5125
Contact Form by FormGet <= 5.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44149
Brands for WooCommerce <= 3.8.2.2 - Missing Authorization to Unauthenticated Order Manipulation and Information Retrieval
Medium
CVE-2023-5109
WP Mailto Links – Protect Email Addresses <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5086
Copy Anything to Clipboard <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4668
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe
Medium
CVE-2023-5121
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
996dc1d7-12f8-467d-bf48-a7a82f1c0a41
Brands for WooCommerce <= 3.8.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-5135
Simple Cloudflare Turnstile <= 1.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44151
Pre-Publish Checklist <= 1.1.1 - Insecure Direct Object Reference to Arbitrary Post '_ppc_meta_key' Update
Medium
CVE-2023-49197
DoFollow Case by Case <= 3.4.2 Cross-Site Request Forgery via getEmail and getUrl
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.