High
CVE-2023-3392
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-46313
Zotpress <= 7.3.4 - Reflected Cross-Site Scripting via 'PHP_SELF'
Medium
CVE-2023-41953
ProfilePress <= 4.13.1 Cross-Site Request Forgery via 'admin_notice'
High
CVE-2023-41954
ProfilePress <= 4.13.1 - Limited Privilege Escalation via 'acceptable_defined_roles'
Medium
d7d08bfd-9861-4e21-a696-25b00233ad94
EWWW Image Optimizer <= 7.2.0 - Sensitive Information Exposure
Medium
CVE-2023-4757
Staff / Employee Business Directory for Active Directory <= 1.2.1 - Insufficient Escaping of Stored LDAP Values
Medium
CVE-2023-5089
Defender Security <= 4.0.2 - Hide Login Page Feature Protection Bypass
Medium
CVE-2023-28621
Wishful Blog <= 2.0.1 & Raise Mag <= 1.0.7 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-41852
MailMunch – Grow your Email List <= 3.1.2 - Cross-Site Request Forgery
Medium
CVE-2023-41805
Starter Templates <= 3.2.5 - Incorrect Authorization
Medium
CVE-2023-41736
Email posts to subscribers <= 6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-40555
Flatsome <= 3.17.5 - Unauthenticated PHP Object Injection
Medium
CVE-2023-41853
WP iCal Availability <= 1.0.3 - Cross-Site Request Forgery
Low
CVE-2023-41798
Directorist <= 7.7.1 - CSV Injection
Medium
CVE-2023-41867
AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-41735
Email posts to subscribers <= 6.2 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-41731
wordpress publish post email notification <= 1.0.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41804
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Critical
CVE-2023-25054
RSVPMaker <= 10.6.6 - Unauthenticated PHP Object Injection
Medium
CVE-2023-41693
MyCryptoCheckout <= 2.125 - Cross-Site Request Forgery
Critical
CVE-2023-4703
All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation
High
CVE-2023-34383
WP Project Manager <= 2.6.0 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2023-41652
RSVPMarker <= 10.6.6 - Unauthenticated SQL Injection
Medium
CVE-2023-35037
Surfer <= 1.3.2.357 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.