Medium
CVE-2023-31086
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-23699
Progress Bar <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppb shortcode
Medium
CVE-2023-23703
Arconix Shortcodes <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-27422
NS Coupon to Become Customer <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
High
CVE-2023-30495
Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated (Subscriber+) SQL Injection via id
Medium
CVE-2023-28693
Advanced Youtube Channel Pagination <= 1.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-31093
Chronosly Events Calendar <= 2.6.2 - Cross-Site Request Forgery via plugin_settings_page
Medium
CVE-2023-27613
Forms Ada <= 1.0 - Reflected Cross-Site Scripting via 'p' parameter
Medium
CVE-2023-23831
Rating Widget <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcodes
Medium
CVE-2023-31091
Dynamically Register Sidebars <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
High
CVE-2023-30872
BSK Forms Blacklist <= 3.6.2 - Authenticated (Administrator+) SQL Injection via 'order' and 'orderby'
Medium
CVE-2023-27623
WP Page Numbers <= 0.5 - Cross-Site Request Forgery via wp_page_numbers_settings
High
CVE-2023-27424
Inactive User Deleter <= 1.59 - Cross-Site Request Forgery via Multiple Functions
Medium
CVE-2023-30877
XML for Google Merchant Center <= 3.0.1 - Reflected Cross-Site Scripting via page parameter
Medium
CVE-2023-27427
CRM Memberships <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-31078
WP BrowserUpdate <= 4.4.1 - Cross-Site Request Forgery via wpbu_administration
Medium
CVE-2023-26530
Updraft <= 0.6.1 - Reflected Cross-Site Scripting via 'backup_timestamp'
Medium
CVE-2023-28174
eRocket <= 1.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
e5eea72d-f10b-460b-be00-bb5b1c4a1a62
Image Optimizer WD <= 1.0.26 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28533
Cab Grid <= 1.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-30874
GPS Plotter <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27624
Redirect After Login <= 0.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-27627
Woocommerce Email Report <= 2.4 - Unauthenticated Cross-Site Scripting
Medium
a5436d14-cbb5-420f-9f3a-698ce59c1e1e
Formilla Chat and Marketing Automation <= 1.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaToolsID'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.