Medium
CVE-2023-1345
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2022-40211
GiveWP <= 2.25.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-1336
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ajax_deactivate'
Medium
CVE-2023-1346
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_page_cache'
Critical
aefbebce-9433-455d-b27c-93088b0c8494
LeadSnap <= 1.23 - Unauthenticated PHP Object Injection via AJAX
Medium
CVE-2023-23672
GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion
Medium
CVE-2023-1337
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_uucss_logs'
Medium
CVE-2023-1342
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'ucss_connect'
Medium
CVE-2023-1340
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_uucss_logs'
Medium
CVE-2023-1333
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_page_cache'
Medium
CVE-2023-1344
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'uucss_update_rule'
Medium
CVE-2023-1338
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'attach_rule'
Medium
CVE-2023-1339
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'uucss_update_rule'
Medium
CVE-2023-1343
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'attach_rule'
Medium
5778ba3d-6670-47ad-ae65-50b6fb8e5db0
Real Estate 7 Theme <= 3.3.4 - Unauthenticated Arbitrary Email Sending
Medium
CVE-2023-1323
Easy Forms for Mailchimp <= 6.8.8 - Authenticated (Administrator+) Cross-Site Scripting via Form Name
Medium
CVE-2023-23668
GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode
Medium
cb7ec7ad-797b-4a5c-9b1c-31284083faef
GiveWP <= 2.25.1 - Cross-Site Request Forgery via save
Medium
CVE-2023-25450
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush
Medium
a9939ffe-a5d5-45cb-b673-665acf1ff09d
GiveWP <= 2.25.1 - Cross-Site Request Forgery via process_bulk_action
Medium
CVE-2023-27631
Daily Prayer Time <= 2023.03.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-27632
Daily Prayer Time <= 2023.03.08 - Cross-Site Request Forgery
Medium
CVE-2023-27418
Side Menu Lite <= 4.0 - Cross-Site Request Forgery to Item Deletion
High
CVE-2023-22719
GiveWP <= 2.25.1 - Unauthenticated CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.