Medium
CVE-2023-0252
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-0403
Social Warfare <= 4.3.1 - Cross-Site Request Forgery
Medium
CVE-2022-4764
Simple File Downloader <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0162
CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4470
Widgets for Google Reviews < 9.8 - Authenticated (Contributor+) Stored XSS
Medium
CVE-2023-0402
Social Warfare <= 4.3.0 - Missing Authorization
Medium
CVE-2022-4649
WP Extended Search <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4776
CC Child Pages <= 1.42 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4654
Easy Pricing Tables <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4794
Amazon Affiliate <= 3.12.2 - Reflected File Download
Medium
de9a945b-31fb-4d0d-9dd1-23bcef1399c2
Show-Hide / Collapse-Expand <= 1.2.6 - Missing Authorization
Medium
CVE-2023-0446
My YouTube Channel <= 3.0.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4682
Lightbox Gallery <= 0.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4667
RSS Aggregator by Feedzy <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47159
Logaster Logo Generator <= 1.3 - Cross-Site Request Forgery to Arbitrary Media Deletion and Creation
Medium
CVE-2022-4791
Product Slider and Carousel with Category for WooCommerce <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
b6bff35f-f881-4c60-9611-4a04727bac36
WooCommerce Eway Gateway <= 3.5.0 - Insecure Direct Object Reference
Medium
CVE-2022-4747
Post Category Image With Grid and Slider <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4552
FL3R FeelBox <= 8.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Medium
CVE-2022-4757
List Pages Shortcode <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4657
Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.5 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-4786
Video.js – HTML5 Video Player for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0086
JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update
Medium
822a3b3b-db39-4edc-ae68-80fb82359316
WordPress RSS Feed Retriever <= 1.6.7 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.