Medium
CVE-2023-5821
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-5314
WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending
Medium
CVE-2023-52147
All In One WP Security <= 5.2.4 - Protection Bypass of Renamed Login Page via URL Encoding
Medium
CVE-2023-46607
WP iCal Availability <= 1.0.3 - Missing Authorization
Medium
CVE-2023-5051
CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-46615
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
Medium
CVE-2023-5126
Delete Me <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-46784
ICS Calendar <= 10.12.0.2 - Authenticated (Contributor+) Arbitrary File Read and Server-Side Request Forgery
Medium
CVE-2023-4939
SALESmanago <= 3.2.4 - Log Injection via Weak Authentication Token
High
CVE-2023-5132
Soisy Pagamento Rateale <= 6.0.1 - Missing Authorization to Sensitive Information Exposure
Low
CVE-2023-6164
MainWP Dashboard <= 4.5.1.2 - Authenticated(Administrator+) CSS Injection
High
CVE-2023-46205
Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated(Contributor+) Local File Inclusion
Medium
CVE-2023-46197
Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure
High
CVE-2023-46154
E2Pdf <= 1.20.18 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-5621
Thumbnail Slider With Lightbox <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title
High
CVE-2023-46147
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-46074
FreshMail For WordPress <= 2.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-5530
Ninja Forms Contact Form <= 3.6.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46068
Maileon <= 2.16.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5228
User Registration – Custom Registration Form, Login Form And User Profile For WordPress <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5082
History Log by click5 <= 1.0.12 - Authenticated(Administrator+) Time-Based Blind SQL Injection
Medium
CVE-2023-45829
Newsletter & Bulk Email Sender <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-5576
Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure
Medium
CVE-2023-45748
MailChimp Forms by MailMunch <= 3.1.7 - Cross-Site Request Forgery via Multiple AJAX actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.