Medium
CVE-2023-41695
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-41850
Outbound Link Manager <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-41857
Click To Tweet <= 2.0.14 - Missing Authorization
Medium
CVE-2023-41735
Email posts to subscribers <= 6.2 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-41858
Order Delivery Date for WP e-Commerce <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-41731
wordpress publish post email notification <= 1.0.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41872
WoodMart <= 7.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-41804
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2023-41728
Rescue Shortcodes <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-41691
WooCommerce PensoPay <= 6.3.1 - Reflected Cross-Site Scripting via 'pensopay_action'
Medium
CVE-2023-41737
Swifty Bar, sticky bar by WPGens <= 1.2.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-25054
RSVPMaker <= 10.6.6 - Unauthenticated PHP Object Injection
Medium
CVE-2023-41861
Restrict <= 2.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-41875
WP Directory Kit <= 1.2.6 - Missing Authorization
Medium
CVE-2023-41729
SendPress Newsletters <= 1.23.11.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41848
Carousel Slider <= 2.2.2 - Missing Authorization
Medium
CVE-2023-32091
POEditor <= 0.9.4 - Cross-Site Request Forgery
Medium
4c0cbf44-f6b4-408d-9a96-98f45d890822
Laposta Signup Embed <= 1.1.0 - Cross-Site Request Forgery
Medium
CVE-2023-41854
wpCentral <= 1.5.7 - Cross-Site Request Forgery
Medium
CVE-2023-41948
Cookie Notice & Consent 1.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41876
WP Gallery Metabox <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2023-41734
Insert Estimated Reading Time <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-41860
Travel Map <= 1.0.1 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-41732
CP Blocks <= 1.0.20 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.