Medium
CVE-2023-0718
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-0713
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
Medium
CVE-2023-0722
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
High
CVE-2023-0477
Auto Featured Image (Auto Post Thumbnail) <= 3.9.15 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2023-0712
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
Medium
CVE-2023-0724
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
Medium
ee50731f-696f-4e9f-a930-05b2b23752de
Cost of Goods for WooCommerce <= 2.8.6 - Cross-Site Request Forgery in save_costs
Medium
CVE-2023-0685
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
Medium
df1a3425-b1d7-4914-ab19-c215d4e845ea
Album and Image Gallery plus Lightbox <= 1.6.2 - Cross-Site Request Forgery
Medium
CVE-2022-46798
ShopLentor <= 2.5.1 - Cross-Site Request Forgery to Post Updates
Medium
CVE-2022-46848
Visualizer <= 3.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting
High
CVE-2023-0381
GigPress <= 2.3.28 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-46796
CURCY <= 2.1.25 - Missing Authorization to Currency Exchange Retrieval
Medium
c3190f9f-8b2f-4251-8804-f386e2c5678f
WP-Optimize <= 3.2.11 - Cross-Site Request Forgery
Medium
CVE-2023-25035
Quick Contact Form <= 8.0.3.1 - Cross-Site Request Forgery to Sensitive Information Disclosure
Medium
CVE-2023-25031
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-46797
All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 5.2.3 - Cross-Site Request Forgery
Medium
CVE-2022-45810
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection
Medium
CVE-2023-25039
Google Maps CP <= 1.0.43 - Missing Authorization to Authenticated (Subscriber+) Feedback Form Submission
Medium
CVE-2023-0376
Quebely <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Option
Medium
CVE-2023-23868
Cost of Goods for WooCommerce <= 2.8.6 - Missing Authorization in save_costs
Medium
CVE-2023-25024
Icegram Collect <= 1.3.8 - Authenticated(Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2023-23885
Quick Contact Form <= 8.0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0552
Pie Register <= 3.8.2.2 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.