High
CVE-2023-48327
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2023-48742
License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-6065
Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure
High
09773141-883b-40e3-bd20-d3115c02e023
Login Lockdown <= 2.06 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-47841
Analytify Dashboard <= 5.1.1 - Cross-Site Request Forgery
High
CVE-2023-47852
Link Whisper Free <= 0.6.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-6203
The Events Calendar <= 6.2.8 - Information Disclosure
High
CVE-2023-6035
EazyDocs <= 2.3.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-5674
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL Injection via id
Medium
CVE-2023-4723
Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-5715
Website Optimization – Plerdy <= 1.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-40600
EWWW Image Optimizer <= 7.2.0 - Unauthenticated Sensitive Information Exposure via Debug Log
Medium
CVE-2023-47761
Simple 301 Redirects by BetterLinks <= 2.0.7 - Missing Authorization via clicked
Critical
CVE-2023-6063
WP Fastest Cache <= 1.2.1 - Unauthenticated SQL Injection
High
CVE-2023-5108
Easy Newsletter Signups <= 1.0.4 - Authenticated (Admin+) SQL Injection
Medium
2330b18e-0907-47e1-b91f-1fe466bcf76b
Sprout Invoices <= 20.5.3 - Sensitive Information Exposure
High
CVE-2023-38519
MainWP <= 4.4.3.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-47244
Email Marketing for WooCommerce by Omnisend <= 1.13.8 - Sensitive Information Exposure
Medium
CVE-2023-47529
Cloud Templates & Patterns collection <= 1.2.2 - Sensitive Information Exposure via Log File
High
CVE-2023-47506
Master Slider Pro <= 3.6.5 - Authenticated (Editor+) SQL Injection
Medium
CVE-2023-4930
Front End PM < 11.4.3 - Sensitive Information Exposure via Directory Listing
High
CVE-2023-47530
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.8.7 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-47558
Who Hit The Page – Hit Counter <= 1.4.14.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-5818
Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.