High
CVE-2023-46823
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2023-5315
Google Maps made Simple <= 0.6 - Authenticated (Subscriber+) SQL Injection via Shortcode
Critical
CVE-2023-5640
Article Analytics <= 1.0 - Unauthenticated SQL Injection
Critical
CVE-2023-5652
WP Hotel Booking <= 2.0.7 - Unauthenticated SQL Injection
Critical
CVE-2023-6030
LogDash Activity Log <= 1.1.3 - Unauthenticated SQL Injection
High
CVE-2023-5815
News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion
Medium
CVE-2023-5051
CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
14958861-305e-4a9b-b428-de204cd6781e
404 Solution <= 2.33.2 - Authenticated (Administrator+) SQL Injection via orderby
High
CVE-2023-2841
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-46197
Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure
High
3bcd61d4-4775-4297-b7f5-664991fcd6d2
GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby
High
CVE-2023-5336
iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2023-46094
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting
Medium
fadc1374-fe4d-414a-af84-1a4de5b89807
404 Solution <= 2.33.0 - Sensitive Information Exposure
High
CVE-2023-46084
Icons Font Loader <= 1.1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-5082
History Log by click5 <= 1.0.12 - Authenticated(Administrator+) Time-Based Blind SQL Injection
Medium
CVE-2023-45834
Libsyn Publisher Hub <= 1.4.4 - Sensitive Information Exposure
High
CVE-2023-45830
Accessibility Suite by Online ADA <= 4.12 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-45657
Nexter <= 2.0.3 - Authenticated (Subscriber+) SQL Injection via 'to' and 'from'
Medium
CVE-2023-5254
AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user
Critical
CVE-2023-5204
AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response
Medium
CVE-2023-45606
Simple URLs <= 120 - Cross-Site Request Forgery via Multiple AJAX Actions
High
CVE-2023-35911
Contact Form Generator <= 2.7.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-46820
Image Regenerate & Select Crop <= 7.3.0 - Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.