Medium
CVE-2023-40607
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-40606
Kanban Boards <= 2.5.21 - Authenticated (Administrator+) Remote Code Execution
Medium
CVE-2023-3170
tagDiv Composer <= 4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-40558
Video Gallery & Management <= 3.3.5 - Cross-Site Request Forgery
Medium
CVE-2023-40559
WooCommerce Dynamic Pricing and Discount Rules <= 2.4.0 - Cross-Site Request Forgery
Medium
CVE-2023-40552
Fitness calculators plugin <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2023-40561
WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking <= 3.7.1 - Cross-Site Request Forgery
Medium
CVE-2023-40329
Custom Admin Login Page | WPZest <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40556
Schedule Posts Calendar <= 5.2 - Cross-Site Request Forgery
Medium
CVE-2023-40328
Carrot <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40332
WP-PostRatings <= 1.91 - IP Spoofing
Medium
CVE-2023-3244
Comments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset
Medium
CVE-2023-40560
Schedule Posts Calendar <= 5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2023-40553
Plausible Analytics <= 1.3.3 - Reflected Cross-Site Scripting via page-url
Medium
CVE-2023-40331
Accordion Slider <= 1.9.6 - Missing Authorization to Notice Dismissal
Medium
CVE-2023-4161
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation
Medium
CVE-2023-40007
CT Commerce <= 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2023-40200
Multiple WPOnlineSupport Plugins <= (Various Versions) - Missing Authorization to Notice Dismissal
Medium
CVE-2023-4314
wpDataTables - Tables & Table Charts <= 2.1.65 - Authenticated(Administrator+) PHP Object Injection
Medium
078d06ad-555b-4de4-a032-d81440c7dfb5
Smart SEO Tool-WordPress SEO优化插件 <= 4.0.1 - Cross-Site Request Forgery via 'wp_ajax_wb_smart_seo_tool'
Medium
CVE-2023-3499
Robo Gallery <= 3.2.15 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40326
Putler Connector for WooCommerce <= 2.12.0 - Missing Authorization via 'send_resync_request'
Medium
CVE-2023-4374
WP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View
High
CVE-2023-3958
WP Remote Users Sync <= 1.2.12 - Authenticated (Subscriber+) Server Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.