Medium
CVE-2023-39918
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-4109
Ninja Forms <= 3.6.25 - Authenticated (Administrator+) Stored HTML Injection
Medium
CVE-2023-39314
Leyka <= 3.30.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-39165
Sign-up Sheets <= 2.2.8 - Cross-Site Request Forgery
Medium
CVE-2023-4013
GDPR Cookie Compliance <= 4.12.4 - Cross-Site Request Forgery to License Modification
Medium
CVE-2023-4209
POEditor <= 0.9.7 - Cross-Site Request Forgery
Medium
CVE-2023-39923
The Post Grid <= 7.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-4150
User Activity Tracking and Log <= 4.0.8 - Cross-Site Request Forgery
Medium
CVE-2023-4023
All Users Messenger <= 1.24 - Authenticated (Subscriber+) Insecure Direct Object Reference to Message Deletion
Medium
CVE-2023-39917
Photo Gallery by Ays <= 5.2.6 - Cross-Site Request Forgery
Medium
CVE-2023-3356
Subscribers Text Counter <= 1.7 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
Medium
CVE-2022-1601
User Access Manager <= 2.2.16 - IP Spoofing
Medium
CVE-2023-40068
Advanced Custom Fields 6.1 - 6.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-4142
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution
High
CVE-2023-4141
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution
Medium
a8c8d839-d2a4-4b2a-ad61-a3cda7826636
Duplicate Post <= 1.4.1 - Cross-Site Request Forgery via 'cdp_action_handling' AJAX action
High
CVE-2023-39157
JetElements <= 2.6.10 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2023-4139
WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing
Medium
CVE-2023-4140
WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation
Medium
CVE-2023-4036
Simple Blog Card <= 1.31 - Sensitive Information Exposure
Medium
ed98d335-16f9-4be8-bace-06e2b5db4cb9
Simple Share Follow Button <= 1.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-1982
Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3501
FormCraft <= 1.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-41874
Order Delivery Date for WooCommerce <= 3.20.0 - Reflected Cross-Site Scripting via 'orddd_lite_custom_startdate' and 'orddd_lite_custom_enddate'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.