Medium
CVE-2023-45050
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
Medium
CVE-2023-5982
UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update
Medium
55234307-9d51-4fe8-bc22-78d32a5fed11
Solid Central <= 3.0.0 - Stored Cross-Site Scripting via packages
High
CVE-2023-5958
POST SMTP Mailer <= 2.7.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5738
WordPress Backup & Migration <= 1.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-5737
WordPress Backup & Migration <= 1.4.3 - Missing Authorization to Settings Update
High
CVE-2023-5576
Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure
Medium
CVE-2023-45636
WordPress Backup & Migration <= 1.4.1 - Missing Authorization to Settings and Schedule Modification
High
3816a6cf-8157-4ad9-83f6-93c9b6c6275f
Post SMTP <= 2.6.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-5121
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-4274
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal
Medium
CVE-2023-5120
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting
High
CVE-2023-41243
WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress'
Medium
00274313-9079-4877-b72e-310e312aa814
Backup Migration <= 1.2.9 - Cross-Site Request Forgery
Medium
CVE-2023-40001
iThemes Sync <= 2.1.13 - Cross-Site Request Forgery and Missing Authorization via 'hide_authenticate_notice'
Medium
CVE-2023-39998
Betheme <= 27.1.1 - Missing Authorization via '_tool_history_delete'
Medium
CVE-2023-0958
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
Medium
CVE-2023-3977
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
High
CVE-2023-3082
Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email
Medium
CVE-2023-3178
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Arbitrary Log Deletion
Medium
CVE-2023-3179
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Account Compromise
Medium
CVE-2023-3132
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
Medium
CVE-2023-35775
WP Backup Manager <= 1.13.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.