Medium
CVE-2023-23985
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-23895
WP Time Slots Booking Form <= 1.1.82 - Improper Authorization Checks
Medium
CVE-2023-23728
WP Flipclock <= 1.7.4 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-23978
WP Client Reports <= 1.0.16 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-23988
My Tickets <= 1.9.11 - Authorization Bypass
Medium
CVE-2023-23991
Booking Calendar <= 9.4.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-23987
User Registration <= 2.3.0 - Authenticated (Administrator+) Stored Cross Site Scripting
Medium
CVE-2023-23982
WPFrom Email <= 1.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47595
WP Go Maps <= 9.0.15 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2022-47594
Essential Blocks for Gutenberg <= 3.8.5 - Cross-Site Request Forgery
Medium
CVE-2023-23973
Contact Us Page – Contact People <= 3.7.0 - Cross Site Request Forgery
Medium
CVE-2023-22702
WPMobile.App — Android and iOS Mobile Application <= 11.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23998
VikRentCar Car Rental Management System <= 1.3.0 - Authenticated (Admin+) Cross Site Scripting
Medium
CVE-2023-23899
Extensions For CF7 <= 2.0.8 - Cross-Site Request Forgery
Medium
CVE-2023-23977
WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23981
Conversational Forms for ChatBot <= 1.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23984
Bubble Menu – circle floating menu <= 3.0.1 - Cross Site Request Forgery
Medium
CVE-2023-23687
Youtube Shortcode <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
fa821005-9593-4a84-b4b4-af746da4d6b9
Contact Form 7 Dynamic Text Extension <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-22709
SRS Simple Hits Counter <= 1.1.0 - Cross-Site Request Forgery
Medium
CVE-2023-23821
Interactive Polish Map <= 1.2 - Authenticated (Admi+) Stored Cross-Site Scripting
Medium
CVE-2022-4471
YARPP – Yet Another Related Posts Plugin <= 5.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4458
amr shortcode any widget <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-22698
Theme Blvd Responsive Google Maps <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.