High
CVE-2023-2636
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
3fa62b8f-1c2f-4bc9-9f2a-8b9765c2d30d
Login/Signup Popup <= 2.3 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2023-3245
Floating Chat Widget - Chaty <= 3.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
de00d13b-fab9-4284-9594-abd000fbb7ef
WP Mail Logging <= 1.11.2 - Missing Authorization to Notice Dismissal
High
CVE-2023-36385
PostX – Gutenberg Blocks for Post Grid <= 2.9.9 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-36502
Balkon <= 1.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-3182
Restrict Content <= 3.2.2 - Reflected Cross-Site Scripting
High
CVE-2023-36508
Contact Form to DB by BestWebSoft <= 1.7.1 - Authenticated (Administrator+) SQL Injection via 's'
Medium
CVE-2023-36503
MaxButtons <= 9.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-3132
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
Medium
CVE-2023-3387
Lana Text to Image <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2579
InventoryPress <= 1.7 - Authenticated(Author+) Stored Cross-Site Scripting
Medium
CVE-2023-36504
BBS e-Popup <= 2.4.5 - Missing Authorization
Medium
79bb311d-d10d-4e4e-b690-84c0051b9911
Restrict Content <= 3.2.2 - Missing Authorization to Notice Dismissal
Medium
CVE-2023-2143
Enable SVG, WebP & ICO Upload <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2023-34017
Five Star Restaurant Reservations <= 2.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-3372
Lana Shortcodes <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-3197
MStore API <= 4.0.1 - Unauthenticated SQL Injection
High
CVE-2023-3186
Popup by Supsystic <= 1.10.18 - Prototype Pollution
Medium
041e635a-9f97-4f54-8ecb-57bbbc321cfc
ProfilePress <= 4.10.3 - Reflected Cross-Site Scripting via error message
Medium
CVE-2023-2561
Gallery Metabox <= 1.5 - Missing Authorization via gallery_remove
Medium
CVE-2023-36505
Ninja Forms <= 3.6.24 - Authenticated (Admin+) Arbitrary File Deletion
Medium
CVE-2023-36510
ReDi Restaurant Reservation <= 23.0211 - Missing Authorization
High
CVE-2023-3167
Mail Queue <= 1.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.