Medium
CVE-2023-4637
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
Critical
CVE-2023-6875
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API
Medium
CVE-2023-6506
WP 2FA <= 2.5.0 - Insecure Direct Object Reference to Arbitrary Email Sending
High
CVE-2023-7027
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device
Medium
CVE-2023-6629
POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msg
Medium
CVE-2023-6520
WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgery
High
CVE-2023-52185
Everest Backup <= 2.1.9 - Sensitive Information Exposure via Log File
Medium
CVE-2023-51681
Duplicator <= 1.5.7 - Cross-Site Request Forgery via views/tools/diagnostics/information.php
High
CVE-2023-7002
Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url
High
CVE-2023-6971
Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir
Critical
CVE-2023-6972
Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion
High
CVE-2023-6620
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-7164
BackWPup <= 4.0.3 - Sensitive Information Exposure
Critical
CVE-2023-6750
WP Clone <= 2.4.2 - Sensitive Information Exposure
Critical
CVE-2018-25095
Duplicator < 1.3.0 - Unauthenticated Remote Code Execution
Critical
CVE-2023-6553
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
Critical
CVE-2023-6271
Backup Migration <= 1.3.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-6113
WP STAGING WordPress Backup Plugin Free <= 3.1.2 and Pro <= 5.1.2 - Sensitive Information Exposure
Critical
CVE-2023-6114
Duplicator <= 1.5.7 AND Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Information Exposure
High
CVE-2023-6266
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
High
CVE-2023-6505
Prime Mover <= 1.9.2 - Sensitive Information Exposure via Directory Listing
High
CVE-2023-5504
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
Medium
CVE-2023-47788
Jetpack <= 12.6.2 - Improper Authorization via WPCom External Media REST endpoints
Medium
CVE-2023-47774
Jetpack < 12.7 - Authenticated(Contributor+) Clickjacking via Iframe Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.