Medium
CVE-2023-44982
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Medium
CVE-2023-48767
MyTube PlayList <= 2.0.3 - Reflected Cross-Site Scripting via addplaylistid
Medium
CVE-2023-41671
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-6369
Export WP Page to Static HTML/CSS <= 2.1.9 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-48772
Prevent Landscape Rotation <= 2.0 - Cross-Site Request Forgery via adminpage.php
High
CVE-2023-48758
JetEngine <= 3.2.4 - Missing Authorization
Medium
CVE-2023-49163
teachPress <= 9.0.5 - Cross-Site Request Forgery via delete_database()
Medium
CVE-2023-48278
WP Forms Puzzle Captcha <= 4.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2023-48756
JetBlocks For Elementor <= 1.3.8 - Reflected Cross Site Scripting
Medium
CVE-2023-48779
360 Javascript Viewer <= 1.7.11 - Missing Authorization
Medium
CVE-2023-48769
Chat Bubble <= 2.3 - Cross-Site Request Forgery via cbb_submit_settings_data
Medium
CVE-2023-48762
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery
Medium
18cbf346-91a3-4856-930e-7753eb1470d9
Chart Builder <= 1.9.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
16a3469d-6264-4ed7-b6ae-fdd7a80c8ca5
Chronopost & Mondial relay pour WooCommerce - WCMultiShipping <= 2.3.7 - Incorrect Authorization
Medium
CVE-2023-39921
Molongui <= 4.6.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-48776
Download canvasio3D Light <= 2.5.0 - Missing Authorization
Medium
CVE-2023-46086
affiliate-toolkit – WordPress Affiliate Plugin <= 3.4.3 - Reflected Cross-Site Scripting via keyword
Medium
CVE-2023-45609
Powr Pack <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-48764
WordPress Brute Force Protection – Stop Brute Force Attacks <= 2.2.5 - Authenticated (Administrator+) SQL Injection via orderby
Medium
CVE-2023-48771
File Gallery <= 1.8.5.4 - Reflected Cross-Site Scripting via post_id
Critical
CVE-2023-46353
Improper neutralization of SQL parameter in My Presta.eu - Product Tag Icons Pro for PrestaShop
High
CVE-2023-46354
Exposure of Private Personal Information to an Unauthorized Actor in MyPrestaModules - Orders (CSV, Excel) Export PRO module for PrestaShop
Low
CVE-2023-48711
google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability
Medium
CVE-2023-32065
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.