Medium
CVE-2023-40662
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-40664
Donations Made Easy – Smart Donations <= 4.0.12 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-4160
WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting
Medium
2ec40d89-9caa-44dc-8577-00fa6463348c
Event Tickets with Ticket Scanner <= 1.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-4245
WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure
Medium
1289ead7-1af1-417d-aa47-7d07268f956c
Popup Box <= 3.7.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
High
CVE-2023-25444
JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-28790
Simple Staff List <= 2.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-4040
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Missing Authorization to Arbitrary Order Status Modification
Medium
CVE-2023-40557
Tabs & Accordion <= 1.3.10 - Authenticated (Contributor+) Content Injection
Critical
CVE-2023-40609
Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQL Injection via 'post'
Medium
CVE-2023-40605
Typing Effect <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-27617
RSVPMarker <= 10.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
High
CVE-2023-40601
Mortgage Calculator Estatik <= 2.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-40603
Simple Org Chart <= 2.3.4 - Missing Authorization
Medium
CVE-2023-4376
Serial Codes Generator and Validator with WooCommerce Support <= 2.4.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2023-27616
RSVPMaker <= 10.6.5 - Unauthenticated Stored Cross-Site Scripting via 'email'
Medium
96112707-04ca-4647-9008-31954764486f
Gallery Portfolio <= 1.4.6 - Missing Authorization via Multiple AJAX actions
Medium
CVE-2023-40011
Cost Calculator Builder <= 3.1.42 - Improper Authorization
Medium
CVE-2023-28791
Simple Org Chart <= 2.3.4 - Cross-Site Request Forgery
Medium
CVE-2023-4772
Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-40330
GD Security Headers <= 1.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-40602
Doofinder for WooCommerce <= 1.5.49 - Unauthenticated Open Redirect
High
CVE-2023-40335
Cleverwise Daily Quotes <= 3.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.