Critical
CVE-2023-49776
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2023-49825
Soledad <= 8.4.1 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2023-49752
Adifier System < 3.1.4 - Unauthenticated SQL Injection
Medium
CVE-2023-49762
AppMySite <= 3.11.0 - Unauthenticated Information Disclsoure
High
CVE-2023-49764
Advanced Database Cleaner <= 3.1.2 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2023-49750
Couponis Demo < 2.2 - Unauthenticated SQL Injection
Medium
CVE-2023-49194
Importify <= 1.0.4 - Unauthenticated Sensitive Information Exposure
High
CVE-2023-44989
CF7 Google Sheets Connector <= 5.0.5 - Unauthenticated Sensitive Information Exposure via Debug Log
Medium
CVE-2023-49188
Track Geolocation Of Users Using Contact Form 7 <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-49166
MSync <= 1.0.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-49161
Bravo Translate <= 1.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-49162
BigCommerce <= 5.1.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-49152
Credit Tracker <= 1.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-44983
Aruba HiSpeed Cache <= 2.0.6 - Sensitive Information Exposure via Log File
Medium
CVE-2023-44991
Media File Renamer <= 5.6.9 - Sensitive Information Exposure via Log File
High
CVE-2023-5645
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL injection via key
Medium
CVE-2023-44982
WP Retina 2x <= 6.4.5 - Sensitive Information Exposure
Medium
CVE-2023-48764
WordPress Brute Force Protection – Stop Brute Force Attacks <= 2.2.5 - Authenticated (Administrator+) SQL Injection via orderby
Critical
CVE-2023-40010
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Unauthenticated SQL Injection via search terms
Critical
CVE-2023-6360
My Calendar <= 3.4.21 - Unauthenticated SQL Injection
High
CVE-2023-6505
Prime Mover <= 1.9.2 - Sensitive Information Exposure via Directory Listing
Critical
CVE-2023-48738
Porto Theme - Functionality <= 2.11.1 - Unauthenticated SQL Injection
High
CVE-2023-48741
ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-48288
WordPress Job Board and Recruitment Plugin – JobWP <= 2.1 - Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.