Medium
de00d13b-fab9-4284-9594-abd000fbb7ef
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-3132
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
Medium
041e635a-9f97-4f54-8ecb-57bbbc321cfc
ProfilePress <= 4.10.3 - Reflected Cross-Site Scripting via error message
Medium
CVE-2023-36505
Ninja Forms <= 3.6.24 - Authenticated (Admin+) Arbitrary File Deletion
High
CVE-2023-3167
Mail Queue <= 1.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-2562
Gallery Metabox <= 1.5 - Missing Authorization via refresh_metabox
Medium
CVE-2023-32104
MyCurator Content Curation <= 3.74 - Cross-Site Request Forgery
Critical
CVE-2023-2834
BookIt <= 2.3.7 - Authentication Bypass
Medium
CVE-2023-30500
Contact Form by WPForms (Free and Premium) <= 1.8.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-23679
JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2023-3135
Mailtree Log Mail <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-35878
Extra User Details <= 0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-35877
Extra User Details <= 0.5 - Cross-Site Request Forgery
Critical
CVE-2023-1597
tagDiv Cloud Library < 2.7 - Missing Authorization to Arbitrary User Metadata Update
Critical
CVE-2023-3277
MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
Medium
CVE-2023-1273
ND Shortcodes <= 6.9 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2023-3093
YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Email
High
CVE-2023-3133
Tutor LMS <= 2.2.0 - Missing Authorization via REST API
High
CVE-2023-3080
WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject
High
CVE-2023-3122
GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email
High
CVE-2023-3081
WP Mail Logging <= 1.11.1 - Unauthenticated Stored Cross-Site Scripting via Email
Medium
CVE-2023-0692
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode
High
CVE-2023-3166
Lana Email Logger <= 1.0.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-0708
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.