Medium
b5639c00-f34c-45e3-8ff1-dfde7856a80e
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-47164
Event Manager for WooCommerce <= 3.7.7 - Cross-Site Request Forgery leading to Uninstall Form Submission
Medium
CVE-2023-28420
Custom Options Plus <= 1.8.1 - Cross-Site Request Forgery via custom_options_plus_adm
Medium
CVE-2023-28494
Contact Form Email <= 1.3.31 - Missing Authorization to Feedback Submission
Medium
CVE-2023-23804
HT Feed <= 1.2.7 - Cross-Site Request Forgery leading to Limited Plugin Activation
Medium
CVE-2023-28496
SMTP2GO <= 1.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2023-28498
Hotel Booking Lite <= 4.6.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-28495
WP Shortcode by MyThemeShop <= 1.4.16 - Cross-Site Request Forgery
Medium
CVE-2022-46866
Import External Images <= 1.4 - Cross-Site Request Forgery via external_image_import_all_ajax
Medium
CVE-2022-46865
Bulk Resize Media <= 1.1 - Cross-Site Request Forgery via bulk_resize_resize_image
Medium
CVE-2023-22673
Website Monetization by MageNet <= 1.0.29.1 - Cross-Site Request Forgery via admin_magenet_settings
Medium
CVE-2022-4827
WP Tiles <= 1.1.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-28490
WordPress Mortgage Calculator Estatik <= 2.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-28492
CP Multi View Event Calendar <= 1.4.10 - Missing Authentication leading to Authenticated (Subscriber+) Private Form Submission
High
2e329432-c404-4312-969b-42cac345637d
UpdraftPlus 1.22.14 to 1.23.2 and UpdraftPlus (Premium) 2.22.14 to 2.23.2 - Privilege Escalation via updraft_central_ajax_handler
Medium
CVE-2023-28419
Force First and Last Name as Display Name <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-25055
Google XML Sitemap for Videos <= 2.6.1 - Cross-Site Request Forgery via video_sitemap_generate
Medium
CVE-2022-47445
Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-28165
Backup Bank: WordPress Backup Plugin <= 4.0.28 - Missing Authorization via post_user_feedback_backup_bank
Medium
CVE-2023-24395
Contact Form 7 Redirect & Thank You Page <= 1.0.3 - Cross-Site Request Forgery via cf7rl_admin_table
Medium
CVE-2022-47446
Store Locator <= 3.98.7 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-47434
PB SEO Friendly Images <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47437
WSB Brands <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via $logo
Medium
CVE-2023-28491
Slideshow Gallery LITE <= 1.7.6 - Authenticated(Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.