Medium
CVE-2023-25065
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-45076
Flexible Elementor Panel <= 2.3.8 - Cross Site Request Forgery
High
CVE-2022-45831
Image Hover Effects Plugin - Caption Hover with Carousel <= 2.8 - Unauthenticated Stored Cross Site Scripting
Medium
CVE-2023-0043
Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-4795
Galleries by Angie Makes <= 1.67 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-25068
Magazine Edge <= 1.13 - Authenticated (Subscriber+) Arbitrary Plugin Activation
Medium
CVE-2022-47171
IP Vault – WP Firewall <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-0084
Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-24398
EZP Coming Soon Page <= 1.0.7.3 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-0619
Kraken.io Image Optimizer <= 2.6.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
Medium
CVE-2023-0535
Donation Block For PayPal <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
cfc59e3d-13c6-4051-8a1a-d109ea06b10b
Opening Hours <= 2.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-24419
Formidable Form Builder <= 5.5.6 - Cross-Site Request Forgery
Medium
82f4ad21-bc55-4daf-bc46-90969dcbabdd
We’re Open! <= 1.44 - Missing Authorization
Medium
CVE-2022-4679
Wufoo Shortcode <= 1.51 - Authenticated (Contributor+) Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23891
Ocean Extra <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-25881
http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)
Medium
CVE-2023-0543
Arigato Autoresponder and Newsletter <= 2.1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
aee6fea2-dbf6-4155-ba3f-f85ea3520504
Beautiful Cookie Consent Banner <= 2.10.0 - Missing Authorization to Settings Update
High
CVE-2023-0278
GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection
High
CVE-2022-38074
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0331
Correos Oficial <= 1.3.0.0 - Unauthenticated Arbitrary File Download
High
CVE-2023-3388
Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-0548
Namaste! LMS <= 2.5.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.