Medium
CVE-2023-0072
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-0062
EAN for WooCommerce <= 4.4.2 - Authenticated (Contributor+ )Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0150
Cloak Front End Email <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0153
Vimeo Video Autoplay Automute <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0148
Gallery Factory Lite <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0143
Send PDF for Contact Form 7 <= 0.9.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4756
YouTube Channel < 3.0.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0149
WordPrezi <= 0.8.2 - Authenticated (Contributor+) Strored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0154
GamiPress – Vimeo integration <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0146
Naver Map <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4489
HUSKY – Products Filter for WooCommerce Professional <= 1.3.1 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-4459
WP Show Posts <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2022-4681
Hide My WP < 6.2.9 - Unauthenticated SQL Injection
Medium
CVE-2023-0173
WPFunnels <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
Medium
CVE-2023-0070
ResponsiveVoice Text To Speech <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4709
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import
Medium
CVE-2022-4825
WP-ShowHide <= 1.04 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-23712
User Meta Manager <= 3.4.9 - Cross Site Request Forgery
Medium
CVE-2022-4700
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation
Medium
CVE-2022-4702
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation
Medium
CVE-2022-4711
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update
Medium
CVE-2022-4626
PPWP – WordPress Password Protect Page <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4708
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification
Medium
CVE-2022-4710
Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.