High
CVE-2023-4861
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-4862
File Manager Pro <= 1.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5063
Widget Responsive for Youtube <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-4971
Weaver Xtreme Theme Support <= 6.3.0 - Authenticated (Administrator+) PHP Object Injection via Imported File
Medium
CVE-2023-5062
WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
05206a31-033e-49b9-9b66-5a6165782643
Table of Contents Plus <= 2302 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4950
Funnelforms Free <= 3.3.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5054
Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
Medium
CVE-2023-50886
Legal Pages <= 1.3.7 - Missing Authorization on 'deleteLegalTemplate'
High
9dd1e52c-83b7-4b3e-a791-a2c0ccd856bc
wpDiscuz <= 7.6.5 - Unauthenticated SQL Injection
Medium
CVE-2023-51371
Bit Assist <= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4961
Poptin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
35027df9-ae55-453f-bb42-4b2664d66293
Statify – Extended Evaluation <= 2.6.3 - Authenticated (Admin+) CSV Injection
Medium
CVE-2023-4975
Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Update
Medium
1a2fb050-1a7c-45cc-86c7-02331d47f780
WPSchoolPress <= 2.2.4 - Cross-Site Request Forgery
High
CVE-2023-3025
Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'
Medium
CVE-2023-5001
Horizontal scrolling announcement <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-4999
Horizontal scrolling announcement <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Critical
CVE-2023-4994
Allow PHP in Posts and Pages <= 3.0.4 - Authenticated (Subscriber+) Remote Code Execution via Shortcode
High
CVE-2023-43610
Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) SQL Injection
Medium
9f23bf62-6008-4a9c-a7ae-a2e513699684
ShortPixel Image Optimizer <= 5.4.1 - Authenticated(Editor+) PHP Object Injection
High
CVE-2023-41955
Essential Addons for Elementor <= 5.8.8 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2023-4963
WS Facebook Like Box Widget <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4643
Enable Media Replace <= 4.1.2 - Authenticated(Author+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.