Medium
CVE-2023-0065
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-0069
WPaudio MP3 Player <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0165
Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2023-0814
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode
Medium
CVE-2023-0068
Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4328
WooCommerce Checkout Field Manager <= 17.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-0076
Download Attachments <= 1.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23685
Portfolio – WordPress Portfolio Plugin <= 2.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0094
UpQode Google Maps <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0212
Advanced Recent Posts <= 0.6.14 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2023-25715
GamiPress <= 2.5.6 - Missing Authorization to User Points Updates
High
CVE-2023-25045
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via $email value
Medium
413b2b38-44f2-4756-b66d-b6544c7ecaa2
Shoppable Images Lite <= 1.2.3 - Missing Authorization
Medium
CVE-2023-0078
Resume Builder <= 3.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-25698
Shoppable Images <= 1.2.3 - Cross Site Request Forgery
Medium
CVE-2023-25716
Announce from the Dashboard <= 1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23670
WordPress Fancy Comments <= 1.2.10 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2023-25058
Schema - All In One Schema Rich Snippets <= 1.6.5 - Cross-Site Request Forgery in rich_snippet_dashboard
High
CVE-2023-25047
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via 'delete' parameter
Medium
CVE-2023-25464
Twitch Player <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25455
WordPress Social Login and Register <= 7.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2022-47166
Void Contact Form 7 Widget For Elementor Page Builder <= 2.1.1 - Cross-Site Request Forgery in void_cf7_opt_in_user_data_track
Medium
CVE-2023-25040
Shortcodes Ultimate <= 5.12.6 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-25702
Quick Paypal Payments <= 5.7.25 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.