Medium
CVE-2023-36528
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
CVE-2023-37985
Restaurant Menu and Food Ordering by Five Star Plugins <= 2.4.6 - Cross-Site Request Forgery via maybe_duplicate_item
Medium
CVE-2023-3620
WP tarteaucitron.js Self Hosted <= 1.2.4 - Running a Vulnerable Dependency
Medium
CVE-2023-37891
Exit Popups & Onsite Retargeting by OptiMonk <= 2.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-37867
Yet Another Stars Rating <= 3.3.8 - Missing Authorization to Vote Tampering
Critical
15f3a6e1-6126-4825-b2b1-e40dc5694f43
Atarim - Client Interface <= 3.9.1 - Missing Authorization via AJAX actions
High
CVE-2023-3343
User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2023-36381
Zippy <= 1.6.5 - Authenticated(Author+) PHP Object Injection via unzipPosts
Critical
155e3de1-e115-4683-bb4d-a0c5667dc3d3
WP Post Author <= 3.2.3 - Privilege Escalation
Medium
CVE-2023-34017
Five Star Restaurant Reservations <= 2.6.7 - Reflected Cross-Site Scripting
Medium
041e635a-9f97-4f54-8ecb-57bbbc321cfc
ProfilePress <= 4.10.3 - Reflected Cross-Site Scripting via error message
Medium
CVE-2023-36505
Ninja Forms <= 3.6.24 - Authenticated (Admin+) Arbitrary File Deletion
Medium
CVE-2023-3118
Export All URLs <= 4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-34382
Dokan <=3.7.19 - Authenticated(Shop Manager+) PHP Object Injection via create_dummy_vendor
Medium
CVE-2023-1430
FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control
High
CVE-2023-2545
Feather Login Page 1.0.7 - 1.1.1 - Missing Authorization to Authentication Bypass and Privilege Escalation
Medium
CVE-2023-2547
Feather Login Page 1.0.7 - 1.1.1 - Missing Authorization to Non-Arbitrary User Deletion
High
CVE-2023-2549
Feather Login Page 1.0.7 - 1.1.1 - Cross-Site Request Forgery to Privilege Escalation
Critical
CVE-2023-28782
Gravity Forms <= 2.7.3 - Unauthenticated PHP Object Injection
Medium
CVE-2023-2779
Social Share, Social Login and Social Comments <= 7.13.51 - Reflected Cross-Site Scripting
Critical
CVE-2023-34027
Recently Viewed Products <= 1.0.0 - Unauthenticated PHP Object Injection
High
CVE-2023-2500
Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2023-32795
WooCommerce Product Add-ons <= 6.1.3 - Authenticated (Shop Manager+) PHP Object Injection
Medium
340e98bf-6484-4634-b2f8-e02f14de67de
Predictive Search <= 1.2.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.