High
CVE-2023-6925
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-22302
Albo Pretorio Online <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0421
MapPress Maps for WordPress <= 2.88.15 - Insufficient Authorization to Information Disclosure
Medium
CVE-2024-22296
12 Step Meeting List <= 3.14.28 - Missing Authorization
Medium
CVE-2024-22293
BP Profile Search <= 5.5 - Reflected Cross-Site Scripting via BPS_FORM
Medium
CVE-2023-6959
Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification
Medium
CVE-2024-0384
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Recipe Notes
High
CVE-2024-22145
InstaWP Connect <= 0.1.0.8 - Missing Authorization to Arbitrary Options Update
Medium
CVE-2024-47330
Slider by Supsystic <= 1.8.6 - Missing Authorization
Medium
CVE-2024-0255
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via icon_color
Medium
CVE-2024-0380
WP Recipe Maker <= 9.1.0 - Directory Traversal
Medium
CVE-2024-0420
MapPress Maps for WordPress <= 2.88.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0585
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image URl
Medium
CVE-2024-22298
Amelia <= 1.0.98 - Missing Authorization
Medium
CVE-2024-22301
Albo Pretorio Online <= 4.12.1 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2024-0250
Analytics Insights <= 6.2 - Open Redirect
Medium
CVE-2023-6970
WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer
Medium
CVE-2024-22297
CBX Map for Google Map & OpenStreetMap <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0382
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via header_tag
Medium
CVE-2024-22292
WP To Do <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-22304
FreshMail For WordPress <= 2.3.2 - Cross-Site Request Forgery
Medium
CVE-2024-22294
IP2Location Country Blocker <= 2.33.3 - Unauthenticated Sensitive Information Exposure via Debug Log File
Critical
CVE-2023-6036
Web3 <= 2.8.0 - Authentication Bypass
Medium
CVE-2024-22295
Robo Gallery <= 3.2.17 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.