High
CVE-2023-29096
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2023-0768
Avirato hotels online booking engine <= 5.0.5 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2022-4118
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection
High
CVE-2023-2114
NEX-Forms <= 8.3.3 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-1408
Video List Manager <= 1.7 - Authenticated (Admin+) SQL Injection
Critical
CVE-2023-28787
Quiz and Survey Master <= 8.1.4 - Unauthenticated SQL Injection
High
CVE-2023-27605
WP Reroute Email <= 1.4.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-47426
Neshan Maps <= 1.1.4 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-4290
Cyr to Lat <= 3.5 - Authenticated SQL Injection
Medium
CVE-2022-47149
Shortlinks by Pretty Links <= 3.4.0 - Cross-Site Request Forgery via route
Medium
CVE-2023-1911
Blocksy Companion <= 1.8.81 - Authenticated(Subscriber+) Sensitive Information Exposure via blocksy_posts shortcode
Medium
CVE-2023-1809
Download Manager Pro <= 6.2.9 - Unauthenticated Information Disclosure
Critical
CVE-2023-1730
SupportCandy <= 3.1.4 - Unauthenticated SQL Injection via parse_user_filters
High
CVE-2023-26015
MapPress Maps for WordPress <= 2.85.4 - Authenticated (Contributor+) SQL Injection via get_maps
Critical
CVE-2023-29432
Houzez <= 2.8.2 - Unauthenticated SQL Injection
High
CVE-2023-27610
Transbank Webpay REST <= 1.6.6 - Authenticated (Administrator+) SQL Injection via orderby
Medium
CVE-2023-25057
Libsyn Publisher Hub <= 1.3.2 - Sensitive Information Exposure
Critical
CVE-2023-1020
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2023-0388
Random Text <= 0.3.0 - Authenticated (Subscriber+) SQL Injection
High
af075ffe-553a-4351-a696-5c678788f3b9
Slimstat Analytics <= 4.9.3.3 - Authenticated (Subscriber+) SQL Injection via Shortcode
Critical
CVE-2023-28662
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection
Medium
CVE-2022-41635
Advanced Shipment Tracking for WooCommerce <= 3.5.2 - Cross-Site Request Forgery via paginate_shipping_provider_list and filter_shipping_provider_list
High
5c51f55f-6e8c-467c-999b-4e6a1a6f7bbc
WC Fields Factory <= 4.1.5 - Authenticated(Subscriber+) SQL Injection
High
CVE-2023-0765
Gallery by BestWebSoft <= 4.6.9 - Authenticated (Author+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.