Medium
0b4a0dff-1054-4f50-8ff5-e3cc2b45d77b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-22690
Ebook Store < 5.78 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47436
Yatra <= 2.1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-26325
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-45815
GDPR Compliance & Cookie Consent <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-2083
Essential Blocks <= 4.0.6 - Missing Authorization via save
Medium
CVE-2023-30784
Kaya QR Code Generator <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via qrCode attribute
Medium
CVE-2023-1891
Helpie FAQ <= 1.9.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-2170
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2022-43490
Stream <= 3.9.2 - Cross-Site Request Forgery
Medium
CVE-2023-28414
ApexChat <= 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-7295
Video Grid <= 1.21 - Reflected Cross-Site Scripting
Medium
CVE-2023-2087
Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save
Medium
CVE-2023-23810
Panorama – WordPress Project Management Plugin <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0762
Clock In Portal <= 2.1 - Cross-Site Request Forgery to Designation Deletion
Medium
CVE-2023-30785
Video Grid <= 1.21 - Reflected Cross-Site Scripting
Medium
CVE-2023-1169
OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload
Medium
CVE-2023-2159
CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass
Medium
CVE-2023-2085
Essential Blocks <= 4.0.6 - Missing Authorization via templates
Medium
CVE-2023-1869
YourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23794
Semalt Blocker <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
a3b164e0-de2e-40d5-935e-31f5bebd87cf
WP-FormAssembly <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2086
Essential Blocks <= 4.0.6 - Missing Authorization via template_count
Medium
CVE-2023-1915
Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.