Medium
CVE-2023-23787
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-28988
Direct checkout, Add to cart redirect for Woocommerce <= 2.1.48 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23788
Custom More Link Complete <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-26533
Zippy <= 1.6.1 - Authenticated (Contributor+) Sensitive Information Disclosure
Medium
CVE-2022-46846
Trending/Popular Post Slider and Widget <= 1.5.7 - Cross-Site Request Forgery via wtpsw_post_view_count
Medium
CVE-2023-28990
Viral Mag <= 1.0.9 - Missing Authorization to Arbitrary Plugin Activation
Medium
39a3450e-f3c2-4c89-985d-28e23eb433dd
External Media <= 1.0.36 - Authenticated(Author+) File Upload to Stored Cross-Site Scripting via SVG
Medium
CVE-2023-28995
Configurable Tag Cloud <= 5.2 - Cross-Site Request Forgery via ctc_options_page()
Medium
CVE-2023-28932
WPMobile.App <= 11.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28930
Mobile Banner <= 1.5 - Cross-Site Request Forgery leading to Plugin Settings Changes
Medium
CVE-2023-24389
Social Proof (Testimonial) Slider <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25445
HappyFiles Pro <= 1.8.1 - Missing Authorization
Medium
CVE-2023-28986
Affiliates Manager <= 2.9.20 - Cross-Site Request Forgery via process_bulk_action()
Medium
CVE-2023-1324
Easy Forms for MailChimp <= 6.8.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-28751
Wp Ultimate Review <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b33bf55c-0397-44a2-8c18-ea5f8f1e2ec9
AI ChatBot <= 4.4.7 - Missing Authorization on openai_settings_option_callback
Medium
CVE-2023-1575
Mega Main Menu <= 2.2.2 - Authenticated (Administrator+) Cross-Site Scripting
Critical
CVE-2023-28662
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection
Medium
CVE-2023-28987
Wp Ultimate Review <= 2.0.3 - Cross-Site Request Forgery
High
CVE-2023-1509
GMAce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary File Modification (Creation/Overwrite/Deletion)
Medium
CVE-2023-25446
HappyFiles Pro <= 1.8.1 - Missing Authorization to Arbitrary File Deletion
Medium
CVE-2023-1414
WP VR <= 8.2.9 - Missing Authorization
Medium
CVE-2023-28989
Happy Addons for Elementor <= 3.8.2 - Cross-Site Request Forgery via handle_optin_optout()
Medium
057ab824-8071-4c3c-9a57-f9a0043a9ad5
Feed Them Social <= 4.0.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.