Medium
CVE-2023-2399
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 378
Reset filters
High
CVE-2023-2288
Otter - Gutenberg Blocks <= 2.2.5 - Authenticated (Author+) PHAR Deserialization
High
CVE-2023-28426
SVG Sanitizer library <= 0.15.4 - Cross-Site Scripting Bypass
Low
CVE-2023-0219
FluentSMTP <= 2.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Email Logs
Medium
CVE-2023-23887
Easy Google Analytics for WordPress <= 1.6.0 - Cross-Site Request Forgery
High
CVE-2023-26326
BuddyForms <= 2.7.7 - PHAR Deserialization
High
CVE-2022-3568
ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to PHAR Deserialization
Medium
CVE-2022-4663
Members Import <= 1.4.2 - Self Cross-Site Scripting
Medium
CVE-2022-4237
Welcart e-Commerce <= 2.8.5 - Authenticated (Subscriber+) Information Disclosure and PHAR deserialization
Medium
CVE-2022-4058
Photo Gallery <= 1.8.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
38979e27-2023-4f84-a708-1732b4117066
WordPress Core < 6.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Customizer
High
CVE-2022-2433
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization
High
CVE-2022-2436
Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization
High
CVE-2022-2442
Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization
High
CVE-2022-2434
String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization
High
c80e6f0b-ccca-4755-b64e-cfcebc5cc1fe
WP Sticky Button <= 1.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-2438
Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
Critical
CVE-2022-2437
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 - Unauthenticated PHAR Deserialization
High
CVE-2022-2444
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
High
CVE-2022-2256
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Critical
CVE-2022-1593
Site Offline or Coming Soon <= 1.6.6 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
Medium
CVE-2022-1964
Easy SVG Support <= 3.2.0 - Cross-Site Scripting via SVG Upload
Medium
CVE-2022-1717
Custom Share Buttons with Floating Sidebar <= 4.1 - Stored Cross-Site Scripting
Medium
CVE-2022-1772
Google Places Reviews < 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.