Medium
CVE-2023-4315
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-3992
PostX - Gutenberg Post Grid Blocks <= 3.0.5 - Reflected Cross-Site Scripting via 'postx_type'
Medium
CVE-2023-3720
Upload Media By URL <= 1.0.7 - Cross-Site Request Forgery via 'umbu_download'
Medium
162595bb-d41b-4dfd-bfda-3a1e5794eaaf
Simple Ticker <= 3.05 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4067
Bus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting
Critical
CVE-2023-29384
WordPress Job Board and Recruitment Plugin – JobWP <= 2.0 - Arbitrary File Upload via 'jobwp_upload_resume'
Critical
CVE-2023-3162
Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass
High
0903bd2b-240f-4791-bfa6-f727d193af4a
Booster for WooCommerce 7.0.0 - Authenticated (Shop Manager+) Missing Authorization to Arbitrary Options Update
Medium
dcd05142-9700-46a8-9ca6-f85e81dfee0d
Short URL <= 1.6.7 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-3954
MultiParcels Shipping For WooCommerce <= 1.15.3 - Reflected Cross-Site Scripting
Critical
82420667-9ba6-46ed-9a53-d16850755bb9
TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API
Medium
CVE-2023-4035
Simple Blog Card <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
6d041edb-70f3-4894-8a78-f6881541054c
Shop as a Customer for WooCommerce <= 1.1.7 - Authenticated (Subscriber+) Privilege Escalation
Medium
5f9cf9c5-d836-4414-a53f-adee2784bd96
Media from FTP <= 11.15 - Improper Privilege Management
Medium
CVE-2023-3366
MultiParcels Shipping For WooCommerce <= 1.15.1 - Cross-Site Request Forgery
High
3c730a69-015a-4b36-aa16-eff6916a302f
Shop as a Customer for WooCommerce <= 1.2.3 - Authenticated (Shop Manager+) Privilege Escalation
Medium
CVE-2023-39919
wpShopGermany - Protected Shops <= 2.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3667
Bit Assist <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
eaabaadf-7881-4c4f-8987-fbba8318a458
Meks Smart Social Widget <= 1.6 - Missing Authorization to notice dimissal
Medium
CVE-2023-36685
CartFlows Pro <= 1.11.12 - Cross-Site Request Forgery
Medium
CVE-2023-0958
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
Medium
CVE-2023-3977
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
Medium
9d79ce22-33ef-4dfb-a842-591cd7cedc94
Web Accessibility By accessiBe <= 1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5798
Assistant <= 1.4.3 - Authenticated (Editor+) Server Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.