Medium
CVE-2023-4282
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-28170
Theme Demo Import <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-39991
BigBlueButton <= 3.0.0-beta.4 - Reflected Cross-Site Scripting
High
CVE-2023-4277
Realia <= 1.4.0 - Cross-Site Request Forgery to User Email Change
Medium
CVE-2023-39987
wSecure Lite <= 2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
f5b08a10-f6bc-44a0-865a-5ad71a1772f7
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.6.8 - Cross-Site Request Forgery
High
CVE-2023-4239
Real Estate Manager <= 7.2 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
High
CVE-2023-4269
User Activity Log <= 1.6.5 - Unauthenticated Data Export to Sensitive Information Disclosure
Medium
CVE-2023-39990
Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Missing Authorization to Authenticated (Subscriber+) Course Modifications
Critical
b280155e-6d07-448d-922c-4a0ea21f4992
Biometric Login for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation
Medium
CVE-2023-4242
FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check
High
CVE-2023-4243
FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation
Medium
CVE-2023-4059
Profile Builder <= 3.9.7 - Missing Authorization to Initial Page Creation
Medium
55fac183-bd8d-4e16-b25a-784861897deb
Paid Memberships Pro - Courses for Membership Add On <= 1.2.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-3360
Weaver Show Posts <= 1.8.0 - Authenticated (Administrator+) PHP Object Injection
Medium
2077bd81-52bd-4aa7-85f6-9abb02aec65b
JCH Optimize <= 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Settings Modification
Medium
CVE-2023-4253
ChatBot <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Medium
CVE-2023-4254
ChatBot 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in Language Settings
Medium
0e454573-4b34-40e3-b4c3-10eb71dfa03e
Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Cross-Site Request Forgery to Course Modifications
Critical
CVE-2023-37390
Themesflat Addons For Elementor <= 2.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2023-39918
Booking Package <= 1.6.01 - Reflected Cross-Site Scripting via 'mode'
Medium
CVE-2023-4109
Ninja Forms <= 3.6.25 - Authenticated (Administrator+) Stored HTML Injection
Medium
CVE-2023-39314
Leyka <= 3.30.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-39165
Sign-up Sheets <= 2.2.8 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.