Medium
CVE-2023-6243
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-49606
Google Map Locations <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2019-25218
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.3 - Authenticated (Admin+) SQL Injection
High
CVE-2024-49613
Simple Code Insert Shortcode <= 1.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-9674
Debrandify · Remove or Replace WordPress Branding <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9425
Advanced Category and Custom Taxonomy Image <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ad_tax_image Shortcode
Medium
CVE-2024-10057
RSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode
Medium
CVE-2024-10055
Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsaio_snapchat Shortcode
Medium
CVE-2024-9452
Branding <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9848
Product Customizer Light <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9892
Add Widget After Content <= 2.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-8790
Social Share With Floating Bar <= 1.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-8740
GetResponse Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-8916
Suki Sites Import <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9350
DPD Baltic Shipping <= 1.2.83 - Reflected Cross-Site Scripting
Medium
CVE-2024-9361
Bulk images optimizer: Resize, optimize, convert to webp, rename ... <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
Medium
CVE-2024-9364
SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Medium
CVE-2024-9373
Elemenda <= 0.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-9382
Gantry 4 Framework <= 4.1.21 - Reflected Cross-Site Scripting
Medium
CVE-2024-9383
Parcel Pro <= 1.8.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-9366
Easy Menu Manager | WPZest <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10040
Infinite-Scroll <= 2.6.2 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2024-10014
Flat UI Button <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via flatbtn Shortcode
Medium
CVE-2024-10049
Edit WooCommerce Templates <= 1.1.2 - Reflected Cross-Site Scripting via page
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.