Critical
CVE-2023-1405
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2022-4940
WCFM Membership <= 2.10.0 - Missing Authorization
High
CVE-2022-4935
WCFM Marketplace <= 3.4.11 - Missing Authorization
Medium
CVE-2022-4936
WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery
Medium
CVE-2022-4941
WCFM Membership <= 2.9.10 - Cross-Site Request Forgery
Medium
CVE-2023-1669
SEOPress <= 6.5.0.2 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2023-0924
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2023-1196
Advanced Custom Fields <= 6.0.7 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2023-1090
SMTP Mailing Queue <= 1.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-29171
Magic Post Thumbnail <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-26533
Zippy <= 1.6.1 - Authenticated (Contributor+) Sensitive Information Disclosure
Medium
CVE-2023-1324
Easy Forms for MailChimp <= 6.8.7 - Reflected Cross-Site Scripting
Medium
b33bf55c-0397-44a2-8c18-ea5f8f1e2ec9
AI ChatBot <= 4.4.7 - Missing Authorization on openai_settings_option_callback
Medium
CVE-2023-1575
Mega Main Menu <= 2.2.2 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2023-1623
Custom Post Type UI <= 1.13.4 - Cross-Site Request Forgery to Sensitive Information Exposure
Medium
07c0b4c5-d76e-4bdc-87d1-3144a1466c77
SupportCandy <= 3.1.3 - Sensitive Data Exposure
Medium
CVE-2023-27922
Newsletter <= 7.6.8 - Reflected Cross-Site Scripting
High
CVE-2022-47444
ProfilePress <= 4.5.3 - Unauthenticated Cross-Site Scripting
High
CVE-2023-1381
WP Meta SEO <= 4.5.4 - Authenticated (Author+) PHAR Deserialization
Medium
CVE-2023-1325
Easy Forms for MailChimp <= 6.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
18f04566-3a63-41f3-aa9b-766304d56499
TH Side Cart and Menu Cart for Woocommerce <= 1.1.1 - Cross-Site Request Forgery
Medium
d09a0b62-6556-4be5-a6f2-0cb0edcced3b
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_store_payment_note
Medium
a2dc1a04-5503-412b-92e7-ed86910abd92
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_delete_payment_note
Medium
5ea02dd5-d837-471c-aa6a-264ffcedd55d
GiveWP <= 2.25.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.