Medium
CVE-2023-51692
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2023-51667
Rate my Post – WP Rating System <= 3.4.2 - IP Address Spoofing
Medium
CVE-2023-51408
WP Optin Wheel <= 1.4.2 - Sensitive Information Exposure via Log File
Medium
CVE-2023-51485
Pay with Vipps for WooCommerce <= 1.14.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-51424
WebinarIgnition <= 3.05.0 - Missing Authorization to Unauthenticated Privilege Escalation
Medium
CVE-2023-51480
Active Products Tables for WooCommerce <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-51675
Advanced Access Manager <= 6.9.18 - Authenticated (Author+) Open Redirect
Critical
CVE-2023-51419
BERTHA AI Plugin <= 1.11.10.7 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-51696
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery via apbct_settings__update_account_email
Medium
CVE-2023-51414
EnvíaloSimple <= 2.1 Unauthenticated PHP Object Injection
High
CVE-2023-51540
Custom 404 Pro <= 3.10.0 - Unauthenticated Stored Cross-Site Scripting via logging
Medium
CVE-2023-51532
Icegram <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Message
Medium
CVE-2023-51673
Stylish Price List <= 7.0.17 - Missing Authorization
Medium
CVE-2023-51416
EnvíaloSimple <= 2.2 - Cross-Site Request Forgery
Medium
CVE-2023-51669
Product Code for WooCommerce <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-51405
BookingPress <= 1.0.74 - Booking Price Manipulation via bookingpress_confirm_booking
Medium
CVE-2023-51677
Schema & Structured Data for WP & AMP <= 1.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-51410
WP Mail Log Plugin <= 1.1.2 - Authenticated(Contributor+) Arbitrary File Upload
Medium
CVE-2023-51496
WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization
Medium
CVE-2023-51523
WooCommerce Easy Duplicate Product <= 0.3.0.7 - Missing Authorization via wedp_duplicate_product_action
Medium
CVE-2023-27150
OpenCRX Cross-site Scripting vulnerability
Medium
CVE-2023-51369
Customize My Account for WooCommerce <= 1.8.3 - Cross-Site Request Forgery via restore_my_account_tabs
Medium
CVE-2023-51402
Ultimate Addons for WPBakery <= 3.19.17 - Cross-Site Request Forgery
Medium
CVE-2023-51359
Essential Blocks for Gutenberg <= 4.2.0 - Incorrect Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.