Medium
CVE-2023-4668
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2023-4274
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal
High
CVE-2023-4861
File Manager Pro – Filester <= 1.8 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-5054
Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
High
CVE-2023-3025
Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'
Critical
CVE-2023-4994
Allow PHP in Posts and Pages <= 3.0.4 - Authenticated (Subscriber+) Remote Code Execution via Shortcode
Critical
CVE-2023-4488
Dropbox Folder Share <= 1.9.7 - Unauthenticated Local File Inclusion
High
CVE-2023-41243
WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress'
Medium
CVE-2023-4893
Crayon Syntax Highlighter <= 2.8.4 - Authenticated (Contributor+) Server Side Request Forgery
High
CVE-2023-4536
My Account Page Editor <= 1.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2023-4666
Form Maker by 10Web <= 1.15.19 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-41804
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2023-34385
Export Import Menus <= 1.8.0 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2023-4596
Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-41239
PowerPress <= 11.0.6 - Authenticated (Contributor+) Server-Side Request Forgery via wp_ajax_powerpress_media_info
High
CVE-2023-4300
Import XML and RSS Feeds <= 2.1.3 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2023-4238
Prevent files / folders access <= 2.5.1 - Authenticated (Administrator+) Arbitrary File Upload in mo_media_restrict_page
High
CVE-2023-40204
Folders <= 2.9.2 - Authenticated (Author+) Arbitrary File Upload in handle_folders_file_upload
High
CVE-2023-29102
Olive One Click Demo Import <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload in olive_one_click_demo_import_save_file
High
35afef52-350c-4b61-b9c0-3ae2572f81fb
Folders <= 2.9.2 - Authenticated (Author+) Arbitrary File Upload
Critical
CVE-2023-38388
JupiterX Core <= 3.3.5 - Unauthenticated Arbitrary File Upload
High
CVE-2023-25444
JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2023-40606
Kanban Boards <= 2.5.21 - Authenticated (Administrator+) Remote Code Execution
High
CVE-2023-3958
WP Remote Users Sync <= 1.2.12 - Authenticated (Subscriber+) Server Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.