Medium
CVE-2023-4920
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-4937
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Medium
CVE-2023-3746
ActivityPub <= 0.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
Medium
CVE-2023-4940
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Medium
CVE-2023-4943
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4942
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
High
CVE-2023-4506
Active Directory Integration / LDAP Integration <= 4.1.9 - Sensitive Information Exposure
Medium
CVE-2023-5109
WP Mailto Links – Protect Email Addresses <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4668
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe
Medium
CVE-2023-49197
DoFollow Case by Case <= 3.4.2 Cross-Site Request Forgery via getEmail and getUrl
Medium
CVE-2023-4645
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
High
CVE-2023-4971
Weaver Xtreme Theme Support <= 6.3.0 - Authenticated (Administrator+) PHP Object Injection via Imported File
Medium
CVE-2023-5054
Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
Medium
CVE-2023-4961
Poptin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4975
Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Update
Medium
9f23bf62-6008-4a9c-a7ae-a2e513699684
ShortPixel Image Optimizer <= 5.4.1 - Authenticated(Editor+) PHP Object Injection
Medium
CVE-2023-4643
Enable Media Replace <= 4.1.2 - Authenticated(Author+) PHP Object Injection
High
CVE-2023-4386
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
High
CVE-2023-4402
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products
Medium
CVE-2023-4915
WP User Control <= 1.5.3 - Insecure Password Reset Mechanism
Medium
e1dbd0e2-8c6c-4127-b37c-269af3b7f71c
Jetpack CRM <= 5.5.0 - Authenticated (Client+) Stored Cross-Site Scripting
High
afd9046c-5b6a-411e-8e66-ff1ba60d7f9d
MultiVendorX <= 4.0.25 - Improper Authorization on REST Routes via 'save_settings_permission'
Critical
CVE-2023-4488
Dropbox Folder Share <= 1.9.7 - Unauthenticated Local File Inclusion
Medium
32f2fc21-165c-483f-ab81-48d8f221e4be
Jetpack CRM <= 5.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.