Medium
CVE-2023-0144
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-4833
YourChannel <= 1.2.1 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-0095
Page View Count <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4704
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import
Medium
CVE-2022-4703
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion
Medium
CVE-2022-4701
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation
Medium
CVE-2022-4707
Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation
Medium
CVE-2022-4670
PDF.js Viewer <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4838
Clean Login <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4717
Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4577
Easy Testimonials <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
130c3bbf-19a9-4e11-b6f2-5a08bbf7b123
Mega Main Menu <= 2.2.2 - Information Disclosure
Medium
CVE-2022-4705
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation
High
79ef7b33-ea6b-4cf2-bed4-8177927ab650
WPDating <= 7.4.1 - Arbitrary File Upload
Medium
CVE-2022-45067
Exclusive Addons for Elementor <= 2.6.1 - Cross-Site Request Forgery
Medium
CVE-2022-4749
Posts List Designer by Category <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scriptiong via Shortcode
Medium
CVE-2023-0071
WP Tabs <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0074
WP Social Widget <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4837
CPO Companion <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4792
News & Blog Designer Pack <= 3.2 - Authenticated (Contributor+) Stored Cross-Site SQcripting via Shortcode
Critical
CVE-2023-0556
ContentStudio <= 1.2.5 - Missing Authorization
Medium
CVE-2023-0097
Post Grid, Post Carousel, & List Category Posts <= 2.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4496
SAML Single Sign On – SSO Login Premium Multisite < 20.0.7 - Open Redirect
Medium
CVE-2022-4831
Custom User Profile Fields <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.