Medium
CVE-2022-47608
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-25479
Podlove Subscribe button <= 1.3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25786
Eyes Only: User Access Shortcode <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23799
Easy Panorama <= 1.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
766003e7-712e-481b-b09d-91d62a325718
Get URL Cron <= 1.4.7 - Missing Authorization via geturlcron_action_handle
Medium
CVE-2023-25784
Sticky Ad Bar <= 1.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25797
vSlider Multi Image Slider <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-0291
Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion
Medium
CVE-2023-25798
Olevmedia Shortcodes <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-25791
Fontiran <= 2.1 - Missing Authorization via fi_add_rule and fi_delete_webfont_php
High
CVE-2023-25448
Archivist – Custom Archive Templates <= 1.7.4 - Cross-Site Request Forgery
Medium
CVE-2023-25442
Zeno Font Resizer <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32501
VikBooking Hotel Booking Engine & PMS <= 1.6.1 - Cross-Site Request Forgery in listenTosFieldSavingTask function
Medium
CVE-2023-25796
WP BaiDu Submit <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
06294c35-6d58-4270-b143-757831fc5da6
Campaign URL Builder <= 1.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting via Create Link
Medium
CVE-2023-25707
VikBooking Hotel Booking Engine & PMS <= 1.5.12 - Cross-Site Request Forgery in save_admin_widgets function
Medium
CVE-2023-25697
GamiPress <= 2.5.6 - Cross-Site Request Forgery to User Earnings Deletion
Medium
CVE-2023-25711
WPGlobus Translate Options <= 2.1.0 - Reflected Cross-Site Scripting via page
Medium
CVE-2023-23726
Tickera <= 3.5.1.0 - Cross-Site Request Forgery to Ticket Post Status Change
Medium
CVE-2023-25705
WP Prayer <= 1.9.6 - Authenticated(Admin+) Stored Cross-Site Scripting
High
CVE-2023-25714
Quick Paypal Payments <= 5.7.25 - Missing Authorization
High
CVE-2023-25713
Quick Paypal Payments <= 5.7.25 - Unauthenticated Stored Cross Site Scripting
Medium
CVE-2023-25712
Google Analytics Opt-Out <= 2.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-38468
NextGEN Gallery <= 3.28 - Cross-Site Request Forgery leading to Post Thumbnail Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.