Medium
CVE-2023-48272
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2023-6009
UserPro <= 5.1.4 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2023-2449
UserPro <= 5.1.1 - Insecure Password Reset Mechanism
Medium
CVE-2023-47877
Perfmatters < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
b758c8a7-6220-4b54-af88-7933a530b5ba
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
Critical
CVE-2023-2437
UserPro <= 5.1.1 - Authentication Bypass to Administrator
Medium
CVE-2023-6222
Quttera Web Malware Scanner <= 3.4.1.48 - Authenticated (Administrator+) Directory Traversal via ShowFile
Medium
CVE-2023-47875
Perfmatters <= 2.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-2438
UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata
Medium
CVE-2023-2448
UserPro <= 5.1.4 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template
High
CVE-2023-2440
UserPro <= 5.1.1 - Cross-Site Request Forgery to Privilege Escalation
High
CVE-2023-6007
UserPro <= 5.1.1 - Missing Authorization via multiple functions
Medium
CVE-2023-47876
Perfmatters <= 2.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-48273
Preloader for Website <= 1.2.2 - Missing Authorization via plwao_register_settings()
Low
52d1f9a3-243e-4e2c-a752-f40b6d275121
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_delete_expired_used_coupon_code
High
CVE-2023-5348
Product Catalog Mode For WooCommerce <= 5.0.2 - Unauthenticated Stored Cross-Site Scripting
Medium
5124be64-6679-4dc5-8117-55c73ae91489
EventPrime – Modern Events Calendar, Bookings and Tickets <= 3.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Low
4edbfeee-b668-4a85-a030-c15d6583dc82
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_preview_emails
Medium
CVE-2023-48274
WCMultiShipping <= 2.3.5 - Missing Authorization to Log Export
Medium
CVE-2023-2446
UserPro <= 5.1.1 - Sensitive Information Disclosure via Shortcode
Medium
3f81003b-8214-4fa3-960f-81b166623de9
GS Pins for Pinterest Lite <= 1.8.0 - Missing Authorization via _update_shortcode
Medium
CVE-2023-6065
Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure
Medium
CVE-2023-5005
Autocomplete Location field Contact Form 7 <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
09773141-883b-40e3-bd20-d3115c02e023
Login Lockdown <= 2.06 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.