Medium
CVE-2023-4067
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2023-29384
WordPress Job Board and Recruitment Plugin – JobWP <= 2.0 - Arbitrary File Upload via 'jobwp_upload_resume'
Critical
CVE-2023-3162
Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass
High
0903bd2b-240f-4791-bfa6-f727d193af4a
Booster for WooCommerce 7.0.0 - Authenticated (Shop Manager+) Missing Authorization to Arbitrary Options Update
Medium
dcd05142-9700-46a8-9ca6-f85e81dfee0d
Short URL <= 1.6.7 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-3954
MultiParcels Shipping For WooCommerce <= 1.15.3 - Reflected Cross-Site Scripting
Critical
82420667-9ba6-46ed-9a53-d16850755bb9
TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API
Medium
CVE-2023-4035
Simple Blog Card <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
6d041edb-70f3-4894-8a78-f6881541054c
Shop as a Customer for WooCommerce <= 1.1.7 - Authenticated (Subscriber+) Privilege Escalation
Medium
5f9cf9c5-d836-4414-a53f-adee2784bd96
Media from FTP <= 11.15 - Improper Privilege Management
Medium
CVE-2023-3366
MultiParcels Shipping For WooCommerce <= 1.15.1 - Cross-Site Request Forgery
High
3c730a69-015a-4b36-aa16-eff6916a302f
Shop as a Customer for WooCommerce <= 1.2.3 - Authenticated (Shop Manager+) Privilege Escalation
Medium
CVE-2023-39919
wpShopGermany - Protected Shops <= 2.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3667
Bit Assist <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
eaabaadf-7881-4c4f-8987-fbba8318a458
Meks Smart Social Widget <= 1.6 - Missing Authorization to notice dimissal
Medium
CVE-2023-36685
CartFlows Pro <= 1.11.12 - Cross-Site Request Forgery
Medium
CVE-2023-0958
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
Medium
CVE-2023-3977
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
Medium
9d79ce22-33ef-4dfb-a842-591cd7cedc94
Web Accessibility By accessiBe <= 1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5798
Assistant <= 1.4.3 - Authenticated (Editor+) Server Side Request Forgery
Medium
CVE-2023-3604
Change WP Admin Login <= 1.1.3 - Protection Mechanism Failure to Login Page Disclosure
Medium
CVE-2023-36683
Schema Pro <= 2.7.8 - Authenticated(Contributor+) Missing Authorization
Medium
CVE-2023-39159
Woocommerce Blocker Lite <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2023-25465
wp tell a friend popup form <= 7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.