Medium
CVE-2023-5884
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
501e9cd1-1187-4d01-a3cc-5edba64c391f
Image Compressor & Optimizer - iLoveIMG <= 1.0.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-4603
Star CloudPRNT for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting
Critical
CVE-2023-5952
Welcart e-Commerce <= 2.9.4 - Unauthenticated PHP Object Injection
Medium
CVE-2023-47529
Cloud Templates & Patterns collection <= 1.2.2 - Sensitive Information Exposure via Log File
Medium
CVE-2023-47514
Star CloudPRNT for WooCommerce <= 2.0.3 - Unauthenticated Cross-Site Scripting
Critical
CVE-2023-47507
Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection
Medium
CVE-2023-47544
Atarim <= 3.12 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-47650
Add Local Avatar <= 12.1 - Cross-Site Request Forgery via manage_avatar_cache
Medium
CVE-2023-4642
kk Star Ratings <= 5.4.5 - Race Condition to Multiple User Voting
High
CVE-2023-5583
WP Simple Galleries <= 1.34 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2023-5340
Five Star Restaurant Menu and Food Ordering <= 2.4.10 - Unauthenticated PHP Object Injection
Medium
CVE-2023-5140
Bonus for Woo <= 5.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-46621
User Avatar <= 1.4.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-46639
kk Star Ratings <= 5.4.5 - Missing Authorization
High
CVE-2023-46615
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
High
CVE-2023-46154
E2Pdf <= 1.20.18 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2023-46147
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-45641
Caret Country Access Limit <= 1.0.2 - Cross-Site Request Forgery
Low
CVE-2023-45105
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.9 - Open Redirect via atkpout.php
High
CVE-2023-45071
Form Maker by 10Web <= 1.15.18 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-44150
ProfilePress <= 4.13.2 - Information Disclosure via Debug Log
Medium
CVE-2023-5295
Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-3154
WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) PHAR Deserialization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.