Medium
CVE-2023-31071
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
59f7a1b2-f718-40e7-8030-b9212edf71b7
Formilla Edge <= 1.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaPluginID'
Medium
CVE-2023-28622
Easy Slider Revolution <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via esrcpt_slider_allow_iframes_filter
Medium
CVE-2023-30876
Dave's WordPress Live Search <= 4.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23727
Formilla Live Chat <= 1.3.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaID'
Medium
CVE-2023-30616
Form Block <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2023-1011
ChatBot <= 4.4.4 - Unauthenticated Stored Cross-Site Scripting via Cross-Site Request Forgery
Medium
CVE-2023-23657
Mail Subscribe List <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via smlsubform shortcode
Medium
CVE-2023-0233
ActiveCampaign – Forms, Site Tracking, Live Chat <= 8.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-47136
Ninja Tables <= 4.3.4 - Cross-Site Request Forgery
Medium
CVE-2023-23720
Verified Reviews (Avis Vérifiés) <= 2.3.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23709
WPJAM Basic <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-30868
CMS Tree Page View <= 1.6.7 - Reflected Cross-Site Scripting via 'post_type'
Medium
CVE-2023-2184
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting
Medium
CVE-2022-47140
ARMember <= 4.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-47137
Ninja Tables <= 4.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Critical
CVE-2022-4774
Bit Form <= 1.8.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Medium
CVE-2023-25460
Easy Ad Manager <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0892
BizLibrary <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-22706
PropertyHive <= 1.5.48 - Reflected Cross-Site Scripting via date_post_id
Medium
CVE-2022-47178
Simple Share Buttons Adder <= 8.4.6 - Cross-Site Request Forgery
Medium
CVE-2023-25958
Simple Tooltips <= 2.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-46819
Continuous announcement scroller <= 13.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-22701
Ebook Store <= 5.775 - Missing Authorization via ebook_store_export_orders
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.