Critical
CVE-2023-51409
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2023-6979
Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2024-22134
Contact Form 7 Extension For Mailchimp <= 0.5.70 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2023-52221
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated Arbitrary File Upload via uploadFile
Critical
CVE-2023-6699
WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css
High
CVE-2023-7082
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
Low
CVE-2023-52144
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2023-51413
Piotnet Forms <= 1.0.25 - Missing Authorization via multiple AJAX actions
High
CVE-2023-51417
JVM rich text icons <= 1.2.3 - Authenticated(Subscriber+) Arbitrary File Upload
Critical
CVE-2023-51475
WP MLM <= 4.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2023-51473
TerraClassifieds <= 2.0.3 Unauthenticated Arbitrary File Upload
Critical
CVE-2023-51411
Frontend Admin by DynamiApps Plugin <= 3.18.3 - Unauthenticated Arbitrary File Upload
High
CVE-2023-51421
Verge3D <= 4.5.2 - Authenticated(Subscriber+) Arbitrary File Upload
Medium
CVE-2023-51676
Happy Addons for Elementor <= 3.9.1.1 - Server Side Request Forgery
Critical
CVE-2023-51468
Rencontre – Dating Site <= 3.10.1 - Unauthenticated Arbitrary File Upload
Critical
CVE-2023-51412
Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload
Critical
CVE-2023-51419
BERTHA AI Plugin <= 1.11.10.7 - Unauthenticated Arbitrary File Upload
High
CVE-2023-51410
WP Mail Log Plugin <= 1.1.2 - Authenticated(Contributor+) Arbitrary File Upload
Medium
CVE-2023-51401
Ultimate Addons for Beaver Builder <= 1.35.13 - Authenticated(Contributor+) Directory Traversal to Arbitrary File Download
Medium
CVE-2023-50897
Media File Renamer <= 5.7.7 - Authenticated(Administrator+) Remote Code Execution
High
CVE-2023-6971
Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir
Critical
CVE-2023-6623
Essential Blocks <= 4.4.2 - Unauthenticated Local File Inclusion
Medium
CVE-2023-6991
JSM file_get_contents() Shortcode <= 2.7.0 - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode
High
CVE-2023-6635
EditorsKit <= 1.40.3 - Authenticated (Administrator+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.