Medium
CVE-2023-40327
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2023-35039
Password Reset with Code for WordPress REST API <= 0.0.15 - Weak Password Recovery Mechanism
Medium
CVE-2023-3814
Advanced File Manager <= 5.1 - Authenticated (Administrator+) Arbitrary File and Folder Access
High
CVE-2023-2916
InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2023-4019
Media from FTP <= 11.16 - Authenticated (Author+) Improper Privilege Management
Medium
CVE-2023-27433
Make Paths Relative <= 1.3.0 - Cross-Site Request Forgery via 'admin/class-make-paths-relative-admin.php'
Medium
CVE-2023-4279
User Activity Log <= 1.6.6 - IP Address Spoofing
Medium
CVE-2023-29441
WebLibrarian <= 3.5.8.1 - Reflected Cross-Site Scripting via multiple parameters
Low
CVE-2023-4216
Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url'
High
CVE-2023-4308
User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
Medium
39c9f055-2527-4678-bda1-27a29ab24acd
Products Quick View for WooCommerce <= 2.2.0 - Missing Authorization
Medium
CVE-2023-2813
Multiple Themes (Various Versions) - Reflected Cross-Site Scripting via Search Field
Medium
CVE-2023-30497
LINE Notify <= 1.4.4 - Reflected Cross-Site Scripting via 'uid'
Medium
CVE-2023-4298
123.chat <= 1.3.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38394
JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization
High
CVE-2023-38385
JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization
Medium
CVE-2023-40210
SB Child List <= 4.5 - Cross-Site Request Forgery via 'sb_cl_update_settings'
Medium
CVE-2023-35040
SendPress Newsletters <= 1.23.11.6 - Missing Authorization
Medium
CVE-2023-3764
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
Medium
CVE-2023-30485
Avartan Slider Lite <= 1.5.3 - Reflected Cross-Site Scripting via 'asview-nouce'
Medium
CVE-2023-40197
flowpaper <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-40202
WP HTML Mail <= 3.4.0 - Cross-Site Request Forgery via 'send_test'
Medium
CVE-2023-40205
PixTypes <= 1.4.15 - Reflected Cross-Site Scripting
Medium
CVE-2022-47168
Printful Integration for WooCommerce <= 2.2.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.