Medium
CVE-2023-23685
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-0094
UpQode Google Maps <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0212
Advanced Recent Posts <= 0.6.14 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2023-25715
GamiPress <= 2.5.6 - Missing Authorization to User Points Updates
High
CVE-2023-25045
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via $email value
Medium
413b2b38-44f2-4756-b66d-b6544c7ecaa2
Shoppable Images Lite <= 1.2.3 - Missing Authorization
Medium
CVE-2023-0078
Resume Builder <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-25698
Shoppable Images <= 1.2.3 - Cross Site Request Forgery
Medium
CVE-2023-25716
Announce from the Dashboard <= 1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23670
WordPress Fancy Comments <= 1.2.10 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2023-25058
Schema - All In One Schema Rich Snippets <= 1.6.5 - Cross-Site Request Forgery in rich_snippet_dashboard
High
CVE-2023-25047
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via 'delete' parameter
Medium
CVE-2023-25464
Twitch Player <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25455
WordPress Social Login and Register <= 7.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2022-47166
Void Contact Form 7 Widget For Elementor Page Builder <= 2.1.1 - Cross-Site Request Forgery in void_cf7_opt_in_user_data_track
Medium
CVE-2023-25040
Shortcodes Ultimate <= 5.12.6 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-25702
Quick Paypal Payments <= 5.7.25 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23800
Shortcodes Ultimate <= 5.12.6 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2023-25050
Shortcodes Ultimate <= 5.12.6 - Authenticated (Subscriber+) Arbitrary File Read via Shortcode
Medium
CVE-2023-0832
Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot
Medium
CVE-2023-25472
Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery
Medium
CVE-2023-25793
Link Juice Keeper <= 2.0.2 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0328
WPCode <= 2.0.6 - Missing Authorization to Sensitive Key Disclosure/Update
Medium
CVE-2023-0377
Scriptless Social Sharing <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Options
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.