Medium
CVE-2023-32583
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Critical
CVE-2023-32242
Woodmart Core <= 1.0.36 - PHP Object Injection
Critical
CVE-2023-32243
Essential Addons for Elementor <= 5.7.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
Medium
CVE-2023-32513
GiveWP <= 2.25.3 - Authenticated (Admin+) PHP Object Injection
Critical
CVE-2023-30869
Easy Digital Downloads 3.1 - 3.1.1.4.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
High
CVE-2022-47599
Bit File Manager <= 5.2.7 - Authenticated (Admin+) PHP Object Injection
High
CVE-2023-1347
Customizer Export/Import <= 0.9.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-23831
Rating Widget <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcodes
Medium
59f7a1b2-f718-40e7-8030-b9212edf71b7
Formilla Edge <= 1.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaPluginID'
Medium
CVE-2022-47441
Charitable <= 1.7.0.10 - Reflected Cross-Site Scripting
High
CVE-2023-1549
Ad Inserter <= 2.7.25 - Authenticated (Admin+) PHP Object Injection
Critical
CVE-2023-1650
ChatBot <= 4.4.6 - Unauthenticated PHP Object Injection via Cookies
Critical
CVE-2023-1405
Formidable Forms <= 6.1.2 - Unauthenticated PHP Object Injection
Medium
CVE-2023-24421
PHP Compatibility Checker <= 1.5.2 - Cross-Site Request Forgery
Medium
CVE-2023-1921
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_ajax_request_callback'
Medium
CVE-2023-1669
SEOPress <= 6.5.0.2 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2023-1196
Advanced Custom Fields <= 6.0.7 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2023-23786
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.3 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2022-47444
ProfilePress <= 4.5.3 - Unauthenticated Cross-Site Scripting
High
CVE-2023-27459
User Registration <= 2.3.2.1 - PHP Object Injection
Critical
aefbebce-9433-455d-b27c-93088b0c8494
LeadSnap <= 1.23 - Unauthenticated PHP Object Injection via AJAX
Medium
CVE-2022-40699
Yet Another Stars Rating <= 3.1.2 - Authenticated (Subscriber+) Cross-Site Scripting via Shortcodes
High
CVE-2023-0876
WP Meta SEO <= 4.5.2 - Missing Authorization in 'startProcess' to Arbitrary Redirect via 'update_link_redirect' task
High
CVE-2023-23830
ProfilePress <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.