Medium
CVE-2023-29236
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-0924
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-25057
Libsyn Publisher Hub <= 1.3.2 - Sensitive Information Exposure
Medium
CVE-2023-1021
Amr Ical Events Lists <= 6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1840
Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25051
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2023-1129
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Manipulation
High
CVE-2023-1420
Ajax Search Lite <= 4.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-29094
Product page shipping calculator for WooCommerce <= 1.3.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1624
WPCode <= 2.0.8 - Cross-Site Request Forgery
Medium
df413b9d-5c22-4276-a11b-4f193c48740d
HT Builder <= 1.2.9 - Cross-Site Request Forgery via plugin_activation
Critical
CVE-2023-1020
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2023-1435
Ajax Search Pro <= 4.26.1 - Reflected Cross-Site Scripting
High
CVE-2023-1196
Advanced Custom Fields <= 6.0.7 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2023-29172
PropertyHive <= 1.5.46 - Reflected Cross-Site Scripting via 'merge_ids'
Medium
CVE-2023-28993
Albo Pretorio Online <= 4.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-29170
Product Enquiry for WooCommerce <= 2.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0388
Random Text <= 0.3.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0899
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated Stored Cross-Site Scripting
Medium
1ddcd2eb-fd7a-48b7-b9ea-3632d49e9734
MasterStudy LMS WordPress Plugin <= 2.9.34 - Missing Authorization via wp_ajax_stm_wpcfto_get_settings
Medium
CVE-2023-1090
SMTP Mailing Queue <= 1.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-29171
Magic Post Thumbnail <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-1126
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2023-29098
CopySafe Web Protection <= 3.13 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.