Medium
CVE-2023-39992
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-39312
Avada <= 7.11.1 - Authenticated(Author+) Arbitrary File Upload via Zip Extraction
Medium
CVE-2023-40213
Justified Gallery <= 1.7.3 - Missing Authorization via 'dismiss_how_to_use_notice' and 'dismiss_notice'
Medium
CVE-2023-39922
Avada <= 7.11.1 - Missing Authorization
Medium
CVE-2023-37393
Atarim <= 3.9.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-39306
Fusion Builder <= 3.11.1 - Reflected Cross-Site Scripting via User Register Element
High
CVE-2023-39307
Avada <= 7.11.1 - Authenticated(Contributor+) Arbitrary File Upload via 'ajax_import_options'
Medium
CVE-2023-31220
WP Categories Widget <= 2.2 - Reflected Cross-Site Scripting
High
CVE-2023-39309
Fusion Builder <= 3.11.1 - Authenticated (Subscriber+) SQL Injection
Medium
77876d74-5825-4bd8-812e-87061d0470e6
Advanced Custom Fields PRO 6.1 - 6.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40214
Business Pro <= 1.10.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-39998
Betheme <= 27.1.1 - Missing Authorization via '_tool_history_delete'
High
CVE-2023-39313
Avada <= 7.11.1 - Authenticated(Contributor+) Server Side Request Forgery via 'ajax_import_options'
Medium
CVE-2023-4151
Store Locator WordPress <= 1.4.12 - Reflected Cross-Site Scripting via 'asl-nounce'
Medium
CVE-2022-45365
Stock Ticker <= 3.23.2 - Reflected Cross-Site Scripting in ajax_stockticker_symbol_search_test
High
CVE-2023-32295
Easy!Appointments <= 1.4.0 - Authenticated(Subscriber+) Arbitrary File Deletion via 'disconnect'
Medium
CVE-2023-39310
Fusion Builder <= 3.11.1 - Missing Authorization
Medium
CVE-2023-36506
YITH WooCommerce Waiting List <= 2.6.0 - Cross-Site Request forgery via 'save_mail_status'
Medium
CVE-2023-39311
Fusion Builder <= 3.11.1 - Cross-Site Request Forgery
High
CVE-2023-4276
Absolute Privacy <= 2.1 - Cross-Site Request Forgery to User Email/Password Change
Medium
CVE-2023-39988
WxSync <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4283
EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-3452
Canto <= 3.0.4 - Unauthenticated Remote File Inclusion
Critical
a4562535-ef69-4337-b03e-0b7c869cb042
Kadence Blocks <= 3.1.10 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.