Medium
CVE-2023-0551
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-2272
Tiempo.com <= 0.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-28994
Flatsome <= 3.16.8 - Reflected Cross-Site Scripting in UX Builder
Medium
CVE-2023-0993
Shield Security <= 17.0.17 - Missing Authorization
Medium
CVE-2023-0058
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-2271
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Shortcode Deletion
Medium
CVE-2023-27420
Arya Multipurpose <= 1.0.5 - Reflected Cross-Site Scripting
High
33b92a86-bb3e-4307-b2cb-7dfde56505cc
Thumbnail Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting
Medium
CVE-2023-27419
Viable blog <= 1.1.4 - Cross-Site Scripting
High
CVE-2023-0992
Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2023-0600
WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection
Medium
CVE-2023-0644
Push Notifications for WordPress by PushAssist <= 3.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-31079
Tippy <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tippy shortcode
Medium
CVE-2023-31072
Advanced Category Template <= 0.1 - Stored Cross-Site Scripting via Cross-Site Request Forgery in _form.php
Medium
CVE-2023-31076
Zip Recipes <= 8.0.6 - Reflected Cross-Site Scripting via 's' parameter
Medium
CVE-2023-27416
Decon WP SMS <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-1835
Ninja Forms Contact Form <= 3.6.21 - Reflected Cross-Site Scripting via 'title'
Medium
CVE-2023-31073
Display custom fields in the frontend – Post and User Profile Fields <= 1.2.0 - Missing Authorization via vg_display_data shortcode
Medium
CVE-2023-31094
Stock Sync for WooCommerce <= 2.4.0 - Reflected Cross-Site Scripting via page parameter
Medium
CVE-2023-0329
Elementor <= 3.12.1 - Authenticated(Administrator+) SQL Injection via 'replace_urls'
Medium
CVE-2023-28783
Woocommerce Tip/Donation <= 1.2 - Authenticated (Shop manager+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-31089
Video XML Sitemap Generator <= 1.0.0 - Cross-Site Request Forgery via video_sitemap_generate
Medium
CVE-2023-1207
HTTP Headers <= 1.18.8 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-31074
Extensions for Leaflet Map <= 3.4.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.