Medium
CVE-2023-37872
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-37865
Download IP2Location Country Blocker <= 2.29.1 - Bypass via IP Spoofing
Medium
CVE-2023-3130
Short URL <= 1.6.4 - Authenticated(Admin+) Stored Cross-Site Scripting
High
CVE-2023-3158
Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject
High
CVE-2023-2079
Buy Me a Coffee – Button and Widget Plugin <= 3.7 - Cross-Site Request Forgery
Medium
CVE-2015-10119
View All Post's Pages <= 0.9.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-3292
Grid Kit Premium < 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-37870
WooCommerce Warranty Requests <= 2.1.9 - Missing Authorization
Medium
50b26952-bf59-4236-93b4-6b4928609c15
WPFunnels <= 2.7.15 - Insecure Direct Object Reference
Medium
CVE-2023-25488
WP Default Feature Image <= 1.0.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
23924342-3b1d-4360-bd87-104091283e35
BuddyBuilder - BuddyPress Builder for Elementor <= 1.7.3 - Cross-Site Request Forgery
Medium
CVE-2023-37867
Yet Another Stars Rating <= 3.3.8 - Missing Authorization to Vote Tampering
Medium
CVE-2023-3507
WooCommerce Pre-Orders <= 2.0.2 - Cross-Site Request Forgery to Order Cancellation
Medium
CVE-2023-37981
Authors List <= 2.0.2 - Reflected Cross-Site Scripting via al_id
Medium
CVE-2023-37971
WooCommerce Product Stock Alert <= 2.0.1 - Missing Authorization via API
Medium
CVE-2023-3134
Forminator <= 1.24.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-25042
oAuth Twitter Feed for Developers <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-24412
Image Social Feed Plugin <= 1.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-35909
Ninja Forms <= 3.6.25 - Denial of Service via Large Form Submissions
Medium
CVE-2023-25477
Video Gallery <= 1.3.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
747afa58-182a-4fb3-bfe3-f15db0b1d85a
WP SMS <= 6.1.5 - Cross-Site Request Forgery
Critical
CVE-2023-37999
HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation
Medium
CVE-2023-25044
Social Share Boost <= 4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-3525
Getnet Argentina para Woocommerce 0.0.1 - 0.0.4 - Authorization Bypass via webhook
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.