Medium
CVE-2023-2996
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
Medium
CVE-2023-33928
WordPress Backup & Migration <= 1.4.0 - Missing Authorization via wt_delete_schedule
Medium
CVE-2023-32960
UpdraftPlus <= 1.23.3 - Cross-Site Request Forgery to Cross-Site Scripting via action_authenticate_storage
Medium
CVE-2023-32583
WP All Backup <= 2.4.3 - Cross-Site Request Forgery to Backup Storage Modification
High
CVE-2023-54346
Backup Migration <= 1.2.8 - Sensitive Information Exposure
Medium
CVE-2023-32504
Wise Chat <= 3.1.3 - Cross-Site Request Forgery
Medium
CVE-2023-26530
Updraft <= 0.6.1 - Reflected Cross-Site Scripting via 'backup_timestamp'
Medium
CVE-2023-30487
LearnPress - Export/Import Courses <= 4.0.2 - Reflected Cross-Site Scripting
High
2e329432-c404-4312-969b-42cac345637d
UpdraftPlus 1.22.14 to 1.23.2 and UpdraftPlus (Premium) 2.22.14 to 2.23.2 - Privilege Escalation via updraft_central_ajax_handler
Medium
CVE-2023-28165
Backup Bank: WordPress Backup Plugin <= 4.0.28 - Missing Authorization via post_user_feedback_backup_bank
Medium
343cbdda-2ec5-437f-b563-96c61663314d
Updraft Plus <= 1.22.24 - Information Disclosure via updraft_ajaxrestore
Medium
CVE-2023-26542
phpinfo() WP <= 4.0 - Cross-Site Request Forgery
Medium
CVE-2022-4897
BackupBuddy <= 8.8.2 - Reflected Cross-Site Scripting
High
cb105ff0-5085-4813-81a6-b1f0798d576c
MainWP (Various extensions) - Cross-Site Request Forgery
Medium
6c563616-e405-4b3e-a70a-543f42118a97
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary Plugin Installation
Medium
CVE-2022-4346
All-In-One Security <= 5.1.2 - Information Disclosure
Medium
CVE-2022-45079
Loginizer <= 1.7.5 - Cross-Site Request Forgery
High
CVE-2022-44589
miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes
Medium
CVE-2021-25059
Download Plugin <= 1.6.2 - Missing Authorization and Sensitive Information Exposure
Medium
CVE-2022-34148
Backup Guard <= 1.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-42884
WIP Custom Login <= 1.2.7 - Missing Authorization
Medium
da0950ad-4d6c-46fe-83c9-c14653fe9f1f
Backup Scheduler <= 1.5.13 - Missing Authorization to Sensitive Information Disclosure
High
CVE-2022-38079
Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery
High
CVE-2022-4023
3DPrint <= 3.5.6.8 - Cross-Site Request Forgery to Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.