High
CVE-2023-40207
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2023-3677
WooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export
High
CVE-2023-40215
Demon image annotation <= 5.3 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-39312
Avada <= 7.11.1 - Authenticated(Author+) Arbitrary File Upload via Zip Extraction
High
CVE-2023-39309
Fusion Builder <= 3.11.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-4269
User Activity Log <= 1.6.5 - Unauthenticated Data Export to Sensitive Information Disclosure
Medium
CVE-2023-4150
User Activity Tracking and Log <= 4.0.8 - Cross-Site Request Forgery
Medium
CVE-2023-4036
Simple Blog Card <= 1.31 - Sensitive Information Exposure
Critical
82420667-9ba6-46ed-9a53-d16850755bb9
TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API
High
CVE-2023-3435
User Activity Log <= 1.6.4 - Unauthenticated SQL Injection
High
CVE-2023-3636
WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
High
2e8f224c-cd22-4926-be24-9da2f22afa50
WPML String Translation <= 3.2.5 - Authenticated (Administrator+) SQL Injection via 'context'
High
CVE-2023-3211
WordPress Database Administrator <= 1.0.3 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-35910
Quasar form <= 6.1 - Authenticated (Subscriber+) SQL Injection via 'id'
High
CVE-2023-38391
Onepage Builder – Easiest Landing Page Builder For WordPress <= 2.4.1 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2023-32590
Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection
Medium
CVE-2021-4428
what3words Address Field <= 4.0.0 - Authenticated (Administrator+) Sensitive Information Exposure in class-w3w-autosuggest-public.php
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
High
CVE-2023-2843
MultiParcels Shipping For WooCommerce <= 1.14.12 - Authenticated(Subscriber+) SQL Injection via id
High
CVE-2023-32741
Contact Form to Any API <= 1.1.2 - Authenticated (Administrator+) SQL Injection via 'form_id'
Critical
CVE-2015-10122
WP Donate <= 1.4 - Unauthenticated SQL Injection in donate-display.php
High
8483196e-f476-41e5-a988-bcd8a9952a64
User Activity Log <= 1.6.2 - Unauthenticated SQL Injection via username
Medium
CVE-2023-36507
BookingPress <= 1.0.64 - Unauthenticated Sensitive Information Exposure
High
CVE-2023-24410
FluentForm <= 4.3.25 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.