Medium
CVE-2023-0710
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2023-0688
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode
Medium
CVE-2023-0709
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcode
Medium
CVE-2023-0693
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcode
Medium
CVE-2023-0695
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf shortcode
Medium
CVE-2023-0694
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode
Medium
CVE-2023-35046
Dynamic Visibility for Elementor <= 5.0.5 - Missing Authorization to Authenticated(Subscriber+) Post Visibility Modification
Medium
CVE-2023-34012
Premium Addons PRO <= 2.8.24 - Reflected Cross-Site Scripting
Critical
CVE-2023-33930
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Zip Extraction to Arbitrary File Upload in File Manager
Critical
CVE-2023-31090
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.60 - Arbitrary File Upload in File Manager
Medium
CVE-2023-33922
Elementor <= 3.13.2 Authenticated(Contributor+) Arbitrary Post Type Creation via save_item
Medium
CVE-2023-33311
Contact Form Entries <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via vx-entries shortcode
High
CVE-2023-31212
Contact Form Entries <= 1.3.0 - Authenticated (Contributor+) SQL Injection via shortcode
High
CVE-2023-2527
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.2.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-32241
Essential Addons for Elementor Pro <= 5.4.8 - Reflected Cross-Site Scripting
High
CVE-2023-32245
Essential Addons for Elementor Pro <= 5.4.8 - Unauthenticated Server-Side Request Forgery
Medium
b66e2537-f187-4237-b248-f8a361f9cb00
Elementor <= 3.13.1 - Missing Authorization to Settings Update
Critical
CVE-2023-32243
Essential Addons for Elementor <= 5.7.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
Medium
CVE-2023-32237
TheGem < 5.8.1.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-32238
TheGem < 5.8.1.1 - Improper Authentication
Medium
CVE-2023-1843
Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization
High
CVE-2023-0443
AnyWhere Elementor <= 1.2.7 - Sensitive Information Exposure
Medium
CVE-2023-31095
Integration for Contact Form 7 HubSpot <= 1.2.8 - Open Redirect via state parameter
Medium
CVE-2023-0329
Elementor <= 3.12.1 - Authenticated(Administrator+) SQL Injection via 'replace_urls'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.