High
CVE-2022-47433
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-46863
Quick Event Manager <= 9.6.4 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
75f0bc5a-f588-4aeb-9e55-72e180d39ddf
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Missing Authorization to Order Information Disclosure
Medium
5ebdf903-828e-4a22-953a-17d85984b576
AutomatorWP <= 2.5.8 - Cross Site Request Forgery via bulk_delete
Medium
CVE-2023-24399
Ocean Extra <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-25701
WatchTowerHQ <= 3.6.16 - Type Juggling to Authentication Bypass in check_ota
Medium
CVE-2022-46811
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Cross-Site Request Forgery to Order Information Disclosure
Medium
CVE-2023-0749
Ocean Extra <= 2.1.2 - Authenticated (Subscriber+) Arbitrary Post Access
Medium
CVE-2022-46806
Cart All In One For WooCommerce <= 1.1.10 - Cross-Site Request Forgery to Cart Changes
Critical
CVE-2023-24000
GamiPress <= 2.5.7 - Unauthenticated SQL Injection
Medium
CVE-2023-25708
WP VR <= 8.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-25704
Interactive SVG Image Map Builder <= 1.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25706
Robots.txt optimization <= 1.4.5 - Cross Site Request Forgery
Medium
CVE-2023-0156
All-In-One Security (AIOS) <= 5.1.4 - Authenticated(Admin+) Directory Traversal
Medium
CVE-2023-0063
WordPress Shortcodes <= 1.6.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-25484
Simple Yearly Archive <= 2.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-2297
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism
Low
CVE-2023-26529
DupeOff <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0069
WPaudio MP3 Player <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0165
Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2023-0814
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode
Medium
CVE-2023-0068
Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4328
WooCommerce Checkout Field Manager <= 17.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-0076
Download Attachments <= 1.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.