Critical
CVE-2023-29386
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2023-29385
WP Abstracts <= 2.6.1 - Reflected Cross-Site Scripting
High
03d8b8e7-5702-42d4-8cd9-ae3ff1a74a7e
Zero Spam for WordPress <= 5.4.4 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-32128
Cryptocurrency Donation Box – Bitcoin & Crypto Donations <= 2.2.7 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-30750
CM Pop-Up banners <= 1.5.10 - Authenticated (Subscriber+) SQL Injection via getStatistics
Medium
CVE-2023-2111
HollerBox <= 2.1.3 - Authenticated (edit_popups+) SQL Injection
Medium
CVE-2022-47587
WP Search Analytics <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-31092
Easy Bet <= 1.0.7 - Authenticated(Contributor+) SQL Injection
Critical
CVE-2023-2032
Custom 404 Pro <= 3.8.0 - Unauthenticated SQL Injection via 's'
Critical
d22fb2e8-bb61-49bc-9fab-8f7c58339a69
Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection
High
CVE-2023-0579
YARPP - Yet Another Related Posts Plugin <= 5.30.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Critical
CVE-2023-0600
WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection
Medium
CVE-2023-0329
Elementor <= 3.12.1 - Authenticated(Administrator+) SQL Injection via 'replace_urls'
Medium
CVE-2023-1207
HTTP Headers <= 1.18.8 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-30495
Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated (Subscriber+) SQL Injection via id
High
CVE-2023-30872
BSK Forms Blacklist <= 3.6.2 - Authenticated (Administrator+) SQL Injection via 'order' and 'orderby'
Medium
CVE-2023-0233
ActiveCampaign – Forms, Site Tracking, Live Chat <= 8.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-47428
Booking calendar, Appointment Booking System <= 3.2.6 - Authenticated (Administrator+) SQL Injection via *_selected
High
CVE-2022-47420
Accessibility Suite by Online ADA <= 4.12 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2022-46818
Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection
High
CVE-2022-47432
Shortcode IMDB <= 6.0.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-0812
Active Directory Integration / LDAP Integration <= 4.1.0 - Unauthenticated Information Disclosure
High
CVE-2022-47430
The School Management – Education & Learning Management <= 4.1 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-26325
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.8 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.