Medium
CVE-2023-23719
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-1404
Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name
Medium
CVE-2023-28991
Order date time for WooCommerce <= 3.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47161
Health Check & Troubleshooting <= 1.5.1 - Cross-Site Request Forgery via health_check_troubleshoot_get_captures
Medium
CVE-2023-23801
Really Simple Google Tag Manager <= 1.0.6 - Cross-Site Request Forgery via plugin_activation
High
CVE-2023-28992
Coupon Affiliates <= 5.4.3 - Unauthenticated Stored Cross-Site Scripting
Medium
9a999044-5d4a-4415-a3b9-28c564e63a25
Responsive Vertical Icon Menu <= 1.5.8 - Reflected Cross-Site Scripting via 'id'
Medium
98730677-200b-4b1a-8568-7af8b2b0e94b
Welcome Bar <= 2.0.3 - Missing Authorization
Medium
82a26836-44fc-47cf-ad09-bd3d264e8635
Welcome Bar <= 2.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-29093
Conditional cart fee / Extra charge rule for WooCommerce extra fees <= 1.0.96 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
71548a7f-43a5-4f71-8add-45f675e8aa66
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23812
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
0b3fa78c-d97f-43bf-b3e9-47d6aa41b458
Advanced Local Pickup for WooCommerce <= 1.5.2 - Cross-Site Request Forgery
Medium
CVE-2023-23792
Swatchly – WooCommerce Variation Swatches for Products <= 1.2.0 - Cross-Site Request Forgery via plugin_activation
Medium
efc53d78-a664-48d0-a752-00c56b3f792f
No CAPTCHA reCAPTCHA for WooCommerce <= 1.2.6 - Missing Authorization to Notification Dismissal
Medium
CVE-2022-46844
PixFields <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-23791
HT Menu <= 1.2.1 - Cross-Site Request Forgery via plugin_activation
Medium
CVE-2023-23803
JustTables – WooCommerce Product Table <= 1.4.9 - Cross-Site Request Forgery via plugin_activation()
Medium
CVE-2023-23789
Premmerce Redirect Manager <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
af075ffe-553a-4351-a696-5c678788f3b9
Slimstat Analytics <= 4.9.3.3 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-23731
WishSuite <= 1.3.3 - Cross-Site Request Forgery via plugin_activation()
Medium
9bcc1965-c409-40ba-a942-175646ad8fda
No CAPTCHA reCAPTCHA for WooCommerce <= 1.2.6 - Authenticated(Admin+) Stored Cross-Site Scripting via Plugin Settings
Medium
CVE-2023-23786
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.3 - Authenticated (Editor+) Stored Cross-Site Scripting
High
8566a5ad-df8a-4843-82c9-05da9d44582d
Easy Quiz Maker <= 1.5 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.