Medium
CVE-2023-33999
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2022-46845
Slider a SlidersPack <= 2.0.2 - Missing Authorization via wp_spaios_save_attachment_data
Medium
CVE-2023-30482
WPBulky <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-32600
Rank Math SEO <= 1.0.119 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-3709
Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure
Medium
CVE-2021-24916
Qubely – Advanced Gutenberg Blocks <= 1.8.5 - Insufficient Authorization
Medium
CVE-2023-36528
kk Star Ratings <= 5.4.3 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2023-3708
Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting
High
8483196e-f476-41e5-a988-bcd8a9952a64
User Activity Log <= 1.6.2 - Unauthenticated SQL Injection via username
Medium
CVE-2023-25984
Dovetail <= 1.2.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-3136
MailArchiver <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-37972
WooCommerce Product Stock Alert <= 2.0.1 - Information Disclosure
High
CVE-2023-32117
Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints
Medium
55bb3620-c182-46c4-bc22-8526cf410cdb
KB Support <= 1.5.88 - Missing Authorization to Authenticated (Subscriber+) User Data Retrieval
High
CVE-2023-37885
RealHomes <= 4.3.7 - Missing Authorization
Medium
CVE-2023-37886
RealHomes <= 4.3.7 - Missing Authorization
Medium
CVE-2023-37891
Exit Popups & Onsite Retargeting by OptiMonk <= 2.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-37890
KB Support <= 1.5.88 - Missing Authorization to Sensitive Data Exposure
Medium
CVE-2023-37889
WPAdmin AWS CDN <= 2.0.13 - Cross-Site Request Forgery
High
CVE-2023-3082
Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email
Medium
02066dcd-1f2f-4ed3-b1f4-7ea8711918e8
All In One WP Security 5.1.9 - Plaintext Storage of Credentials
Medium
CVE-2023-3508
WooCommerce Pre-Orders <= 2.0.2 - Cross-Site Request Forgery
High
CVE-2023-3158
Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-37971
WooCommerce Product Stock Alert <= 2.0.1 - Missing Authorization via API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.