Medium
CVE-2023-27454
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-23677
GTmetrix for WordPress <= 0.4.5 - Reflected Cross-Site Scripting via 'url'
Medium
c35bffb2-f805-48d6-938a-cb5142eac3b1
Fontiran <= 2.1 - Cross-Site Request Forgery
Medium
c0e58807-bccc-469f-82c3-a4bbf088a626
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-26525
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection
Medium
CVE-2022-46799
Easy Testimonial Slider and Form <= 1.0.15 - Unauthenticated Reflected Cross-Site Scripting via search_term
Medium
CVE-2023-24400
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_policy_link' Shortcodes
Medium
CVE-2023-1155
Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
701bf711-d692-4eb1-8459-befa62264b97
Fontiran <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-27451
Instant Images <= 5.1.0.1 - Authenticated (Author+) Server-Side Request Forgery via instant_images_download
Medium
CVE-2023-0085
Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass
Medium
CVE-2023-27443
Simple Vimeo Shortcode <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-47152
ClickFunnels <= 3.1.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-27447
WP SMS <= 6.0.4 - Information Disclosure via REST API
Medium
CVE-2023-27457
Add Expires Headers & Optimized Minify <= 2.7 - Cross-Site Request Forgery via [placeholder]
Medium
CVE-2023-27452
Button Generator – easily Button Builder <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-27453
LWS Tools <= 2.3.1 - Cross-Site Request Forgery
Medium
CVE-2022-42882
Simple CSV/XLS Exporter <= 1.5.8 - CSV Injection
Medium
CVE-2023-27446
DeepL Pro API translation <= 2.1.4 - Cross-Site Request Forgery via saveSettings
Medium
CVE-2023-27458
WpStream – Live Streaming, Video on Demand, Pay Per View <= 4.4.10 - Cross-Site Request Forgery via wpstream_settings
Medium
CVE-2023-27456
Total Theme <= 2.1.19 - Authenticated(Subscriber+) Plugin Activation
Medium
CVE-2023-0395
menu shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-27461
When Last Login <= 1.2.1 - Cross-Site Request Forgery via wll_hide_subscription_notice
High
CVE-2023-0441
Gallery Blocks with Lightbox <= 3.0.7 - Missing Authorization in pgc_sgb_action_wizard
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.