Medium
CVE-2023-33999
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-46845
Slider a SlidersPack <= 2.0.2 - Missing Authorization via wp_spaios_save_attachment_data
Medium
CVE-2023-30482
WPBulky <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-3365
MultiParcels Shipping For WooCommerce <= 1.14.13 - Missing Authorization via get_history
Medium
CVE-2023-3403
ProfileGrid <= 5.5.1 - Missing Authorization to User Import
Medium
CVE-2023-37988
Contact Form Generator <= 2.5.5 - Reflected Cross-Site Scripting
High
CVE-2023-3714
ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation
High
CVE-2023-2843
MultiParcels Shipping For WooCommerce <= 1.14.12 - Authenticated(Subscriber+) SQL Injection via id
Medium
CVE-2023-3650
Bubble Menu <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-3647
IURNY by INDIGITALL – WhatsApp Chat, Web Push Notifications (FREE) <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-32600
Rank Math SEO <= 1.0.119 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-32741
Contact Form to Any API <= 1.1.2 - Authenticated (Administrator+) SQL Injection via 'form_id'
Medium
CVE-2023-37987
YourMembership Single Sign On <= 1.1.3 - Missing Authorization
Medium
CVE-2023-3709
Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure
Medium
CVE-2023-37984
Quiz And Survey Master <= 8.1.10 - Excessive Quiz Attempts
Medium
CVE-2021-24916
Qubely – Advanced Gutenberg Blocks <= 1.8.5 - Insufficient Authorization
Medium
CVE-2023-37989
Easyship WooCommerce Shipping Rates <= 0.8.9 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-3404
ProfileGrid <= 5.5.0 - Hardcoded Encryption Key
Medium
CVE-2023-34011
ShopConstruct – Product Catalog, Shopping Cart and eCommerce solution for Store <= 1.1.2 - Reflected Cross-Site Scripting via multiple parameters
High
CVE-2023-3713
ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update
Medium
CVE-2023-37986
YourMembership Single Sign On <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-2433
YARPP – Yet Another Related Posts Plugin <= 5.30.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-32292
Chat Button <= 1.8.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-0604
WP Food Manager <= 1.0.3 - Authenticated(Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.