High
CVE-2023-51422
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2023-51470
Rencontre – Dating Site <= 3.11.1 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-51667
Rate my Post – WP Rating System <= 3.4.2 - IP Address Spoofing
Medium
CVE-2023-51414
EnvíaloSimple <= 2.1 Unauthenticated PHP Object Injection
Critical
CVE-2023-51700
WP-Mobile-BankID-Integration <= 1.0.0 - PHP Object Injection
Critical
CVE-2023-6049
Estatik Real Estate Plugin <= 4.1.0 - Unauthenticated PHP Object Injection
High
CVE-2023-6971
Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir
Medium
CVE-2023-50858
Anti Hacker <= 4.34 - Cross-Site Request Forgery via antihacker_ajax_scan
Medium
CVE-2023-50837
Login Lockdown – Protect Login Form <= 2.06 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-5877
affiliate-toolkit <= 3.4.2 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2023-49846
Author Avatars List/Block <= 2.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-49778
Sayfa Sayaç <= 2.6 - Unauthenticated PHP Object Injection
Critical
CVE-2023-49773
BCorp Shortcodes <= 0.23 - Unauthenticated PHP Object Injection
Critical
CVE-2023-49826
Soledad <= 8.4.1 - Unauthenticated PHP Object Injection
Critical
CVE-2023-49772
Genesis Simple Love <= 2.0 - Unauthenticated PHP Object Injection
High
CVE-2023-49819
Structured Content <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2023-49196
PageLayer <= 1.7.7 - Cross-Site Request Forgery via pagelayer_load_plugin
High
CVE-2023-6528
Slider Revolution < 6.6.19 - Authenticated (Author+) PHP Object Injection
Medium
CVE-2023-46086
affiliate-toolkit – WordPress Affiliate Plugin <= 3.4.3 - Reflected Cross-Site Scripting via keyword
Medium
CVE-2023-39305
Yet Another Stars Rating <= 3.4.3 - Missing Authorization via init
Medium
CVE-2023-48332
Mail Bank - #1 Mail SMTP Plugin for WordPress <= 4.0.14 - Missing Authorization
Medium
CVE-2023-47850
Community by PeepSo <= 6.2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
91f86c22-94db-4c43-985a-2f3dd96ece21
Welcart e-Commerce <= 2.9.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-6532
WP Blogs' Planetarium <= 1.0 - Cross-Site Request Forgery to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.