Medium
CVE-2023-35777
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Low
CVE-2023-3947
Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure
Medium
CVE-2023-38386
Ninja Forms <= 3.6.25 - Missing Authorization to Contributor+ Form Submission Export
Medium
CVE-2023-38390
Mobile Address Bar Changer <= 3.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-39166
tagDiv Composer < 4.4 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2023-37979
Ninja Forms <= 3.6.25 - Reflected Cross-Site Scripting via 'data'
Medium
CVE-2023-31214
WP Quick Post Duplicator <= 2.0 - Missing Authorization
Medium
f962a3ef-205d-42e2-acf1-45eabfdba3ee
Local Development <=2.8.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-38396
Google Map Shortcode <= 3.1.2 - Cross-Site Request Forgery to Plugin Setting Update
Medium
CVE-2023-38483
Instant CSS <= 1.1.4 - Missing Authorization via AJAX Actions
High
CVE-2023-3435
User Activity Log <= 1.6.4 - Unauthenticated SQL Injection
Medium
CVE-2023-38479
Simple Googlebot Visit <= 1.2.4 - Missing Authorization to Settings Update
Medium
CVE-2023-38398
Taboola <= 2.0.1 - Cross-Site Request Forgery to Plugin Settings Update
Critical
CVE-2023-32297
LWS Affiliation <= 2.2.6 - Unauthenticated Remote/Local File Inclusion
Medium
CVE-2023-3645
Contact Form Builder by Bit Form <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-38477
QR code MeCard/vCard generator <= 1.6.0 - Missing Authorization via wqm_make_url_permanent
Medium
CVE-2023-3721
WP-EMail <= 2.69.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-38392
Custom Field Template <= 2.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-2802
Ultimate Addons for Contact Form 7 <= 3.1.28 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-3636
WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2023-37990
Perelink Pro <= 2.1.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-38480
Booster Elementor Addons <= 1.4.9 - Missing Authorization
Medium
CVE-2023-3328
Custom Field For WP Job Manager <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-30491
CodeBard's Patron Button and Widgets for Patreon <= 2.1.8 - Reflected Cross-Site Scripting via 'site_account'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.