Medium
CVE-2023-1602
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2023-36381
Zippy <= 1.6.5 - Authenticated(Author+) PHP Object Injection via unzipPosts
High
CVE-2022-46860
Short URL <= 1.6.4 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-36527
Post to CSV by BestWebSoft <= 1.4.0 - Authenticated (Author+) CSV Injection
Medium
CVE-2023-28415
Side Cart Woocommerce (Ajax) <= 2.2 Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32123
The7 <= 11.7.3 - Cross-Site Request Forgery
High
CVE-2023-23796
Form Builder <= 1.9.9.0 - Unauthenticated CSV Injection
Critical
155e3de1-e115-4683-bb4d-a0c5667dc3d3
WP Post Author <= 3.2.3 - Privilege Escalation
Critical
CVE-2023-2982
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass
Medium
CVE-2023-23684
WPGraphQL <= 1.14.5 - Authenticated (Editor+) Server-Side Request Forgery
Medium
CVE-2022-47421
ARMember <= 4.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36517
WP Abstracts <= 2.6.2 - Cross-Site Request Forgery
Medium
CVE-2023-28692
WP Abstracts <= 2.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36519
SW Product Bundles <= 2.0.15 - Missing Authorization
Medium
CVE-2023-3427
Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer
Critical
CVE-2023-36525
WPJobBoard <= 5.9.0 - Unauthenticated SQL Injection
Medium
CVE-2022-44629
Catalyst Connect Zoho CRM Client Portal <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36520
Editorial Calendar <= 3.7.12 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
CVE-2022-36399
Booked < 2.4.4 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2022-45821
NOO Timetable <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
5bc03b4a-f7ec-4827-b914-0560b9268b6f
Front User Submit | Front Editor <= 3.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2023-36529
Houzez CRM <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-36526
Duplicate Post Page Menu & Custom Post Type <= 2.3.1 - Missing Authorization
Medium
CVE-2023-36518
Post Hit Counter <= 1.3.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.