Medium
CVE-2023-25032
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-45655
PixFields <= 0.7.0 - Cross-Site Request Forgery
Medium
CVE-2023-45652
Remote Content Shortcode <= 1.5 - Authenticated(Contributor+) Local File Inclusion via shortcode
Medium
CVE-2023-5561
WordPress Core 4.7.0 - 6.3.1 - Sensitive Information Exposure via User Search REST Endpoint
Medium
CVE-2023-45647
Constant Contact Forms by MailMunch <= 2.0.10 - Cross-Site Request Forgery
Medium
CVE-2023-45630
Responsive Image Gallery, Gallery Album <= 2.0.3 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-4836
User Private Files < 2.0.5 - Insecure Direct Object Reference
Medium
CVE-2023-47816
Charitable <= 1.7.0.13 - Authenticated(Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-5254
AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user
Medium
CVE-2023-45631
Responsive Image Gallery, Gallery Album <= 2.0.3 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-5533
AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions
Medium
CVE-2023-5534
AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions
Medium
CVE-2023-45629
Responsive Image Gallery, Gallery Album <= 2.0.3 - Cross-Site Request Forgery
Critical
CVE-2023-5212
AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file
Critical
CVE-2023-5204
AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response
Critical
CVE-2023-5414
Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
Medium
CVE-2023-45637
EventPrime <= 3.1.5 - Reflected Cross-Site Scripting via 'event_id'
Critical
CVE-2023-5241
AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file
Medium
CVE-2023-5531
Thumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery
Critical
CVE-2023-45603
User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-4968
WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5238
EventPrime < 3.2.0 - Reflected HTML Content Injection
Medium
CVE-2023-4251
EventPrime < 3.2.0 - Cross-Site Request Forgery
Medium
CVE-2023-4250
EventPrime < 3.2.0 - Reflected Cross-Site Scripting via keyword and ep_filter_date
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.