Medium
CVE-2023-23874
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-41633
Community by PeepSo <= 6.0.2.0 - Cross Site Request Forgery
Medium
CVE-2023-23808
Sponsors Carousel <= 4.02 - Authenticated (Admin+) Stored Cross-Site Scripting in show
Medium
CVE-2023-23705
WordPress Books Gallery <= 4.4.8 - Cross-Site Request Forgery leading to Plugin Settings Changes
Medium
CVE-2022-47157
WP Custom Fields Search <= 1.2.34 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0066
Companion Sitemap Generator <= 4.5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
ca8f4f6b-756b-4511-9e48-e41a872a9dad
Contextual Related Posts <= 3.3.1 - Cross-Site Request Forgery in crpClearCache
Medium
CVE-2022-46853
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 5.0.4 - Cross-Site Request Forgery in rttpg_spare_me
Medium
CVE-2023-23875
Binge Site Verification using Meta Tag <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Admin Settings
Medium
CVE-2023-25994
Publish to Schedule <= 4.4.2 - Cross-Site Request Forgery leading to Plugin Option Changes
High
CVE-2022-47146
Real Estate 7 Theme <= 3.3.1 - Stored Cross-Site Scripting
Medium
CVE-2023-26528
Shipyaari Shipping Management <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-46852
WP Table Builder – WordPress Table Plugin <= 1.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23876
wpDataTables <= 2.1.49 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-25979
Video Gallery – YouTube Gallery <= 1.7.6 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-23708
Visualizer <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23881
Circles Gallery <= 1.0.10 - Authenticated (Admin+) Stored Cross-Site Scripting via Admin Settings
High
CVE-2023-25988
Video Gallery – YouTube Gallery <= 1.7.6 - Missing Authorization
Medium
CVE-2023-23713
Theme Tweaker <= 5.20 - Cross-Site Request Forgery
Medium
CVE-2023-22683
Clio Grow <= 1.0.0 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-25978
Protected Posts Logout Button <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-47143
Multiple Page Generator Plugin <= 3.3.9 - Cross-Site Request Forgery
Critical
CVE-2023-0037
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters
Medium
CVE-2023-23809
Stock market charts from finviz <= 1.0.1 - Authenticated(Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.