High
d6cbec61-cbe8-44a6-8cc8-8603393ed6b0
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
a02f4fc4-42ca-4f8e-9c28-bfa69644e7b6
Booking calendar, Appointment Booking System <= 3.2.8 - Multiple Authenticated(Editor+) SQL Injection
Medium
f1efcff5-3af6-4c44-9654-b917523419aa
WooCommerce <= 7.0.0 - Authenticated(Shop Manager+) Sensitive Information Exposure
Critical
CVE-2023-5203
WP Sessions Time Monitoring Full Automatic <= 1.0.8 - Unauthenticated SQL injection
Medium
CVE-2023-7320
WooCommerce <= 7.8.2 - Sensitive Information Exposure
High
CVE-2023-4598
Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
Medium
CVE-2023-41695
Analytify Dashboard <= 5.1.0 - Missing Authorization to Opt-In
Medium
CVE-2023-41848
Carousel Slider <= 2.2.2 - Missing Authorization
High
CVE-2023-41685
Woocommerce Support System <= 1.2.1 - Authenticated (Administrator+) SQL Injection via 'orderby'
High
CVE-2023-34383
WP Project Manager <= 2.6.0 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2023-41652
RSVPMarker <= 10.6.6 - Unauthenticated SQL Injection
Critical
CVE-2023-4490
WP Job Portal <= 2.0.5 - Unauthenticated SQL Injection
Medium
9945c85b-a97a-4ad0-9d0a-69faf157563a
Simple 301 Redirects <= 2.0.7 - Cross-Site Request Forgery via 'clicked'
Medium
CVE-2023-30471
WP Search Analytics <= 1.4.7 - Reflected Cross-Site Scripting via 'render_stats_page'
Medium
CVE-2023-4471
Order Tracking Pro <= 3.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-4500
Order Tracking Pro <= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40674
Simple URLs <= 118 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-40667
Simple URLs <= 117 - Reflected Cross-Site Scripting via 'post_id'
Medium
CVE-2023-40678
Simple URLs <= 117 - Missing Authorization via AJAX actions
Medium
CVE-2023-40662
Cookies and Content Security Policy <= 2.15 - Sensitive Information Exposure
Critical
CVE-2023-40609
Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQL Injection via 'post'
Medium
CVE-2023-40561
WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking <= 3.7.1 - Cross-Site Request Forgery
High
CVE-2023-2916
InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Low
CVE-2023-4216
Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.