High
CVE-2023-28788
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Critical
CVE-2022-46808
ARMember <= 3.4.11 - Unauthenticated SQL Injection
High
CVE-2023-0277
WC Fields Factory <= 4.1.5 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-28659
Waiting: One-click countdowns <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'pbc_down[meta][id]'
High
CVE-2023-28660
Events Made Easy <= 2.3.17 - Authenticated (Subscriber+) SQL Injection via 'search_name'
High
CVE-2023-28661
WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection via 'value'
High
CVE-2023-1425
Groundhogg <= 2.7.9.3 - Authenticated (Administrator)+ SQL Injection
High
CVE-2023-1471
WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-1426
WP Tiles <= 1.1.2 - Authenticated(Subscriber+) Sensitive Information Exposure
Medium
CVE-2022-47445
Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-28491
Slideshow Gallery LITE <= 1.7.6 - Authenticated(Admin+) SQL Injection
Medium
CVE-2023-28421
WordPress Email Marketing Plugin – WP Email Capture <= 3.10 - Information Exposure via wp_email_capture_options_process
Medium
CVE-2022-46795
Print Invoice & Delivery Notes for WooCommerce <= 4.7.2 - Cross-Site Request Forgery via ts_reset_tracking_setting
High
CVE-2023-0955
WP Statistics <= 13.2.16 - Authenticated (Admin+) SQL Injection
High
CVE-2023-26525
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection
High
CVE-2023-0631
Paid Memberships Pro <= 2.9.11 - Authenticated (Subscriber+) SQL Injection via Shortcodes
Medium
CVE-2023-0911
Shortcodes Ultimate <= 5.12.7 - Authenticated (Subscriber+) Information Exposure
Critical
CVE-2023-25960
Zendrop – Global Dropshipping <= 1.0.0 - SQL Injection in setMetaData
High
CVE-2023-0630
Slimstat Analytics <= 4.9.3.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-0875
WP Meta SEO <= 4.5.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2022-45805
Paytm Payment Gateway <= 2.7.3 - Authenticated (Editor+) SQL Injection via 'post'
Medium
CVE-2023-23886
WP-RecentComments <= 2.2.7 - Unauthenticated Information Exposure
Critical
CVE-2023-0037
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters
High
CVE-2023-0895
WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.