High
CVE-2023-5953
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,540
High
f59004bb-b026-4137-a332-f46a09237e7b
Welcart e-Commerce <= 2.9.4 - Cross-Site Request Forgery
High
CVE-2023-47784
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2023-5715
Website Optimization – Plerdy <= 1.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
db0508dd-143f-4674-8193-d46967d2799f
Legal Pages <= 1.3.8 - Missing Authorization
Medium
CVE-2023-40600
EWWW Image Optimizer <= 7.2.0 - Unauthenticated Sensitive Information Exposure via Debug Log
Medium
CVE-2023-4602
Namaste! LMS <= 2.6.1.1 - Reflected Cross-Site Scripting
Medium
c357e34f-2d0f-4af4-bb67-cbbc6cd4e141
Hreflang Manager <= 1.06 - Cross-Site Request Forgery
Medium
CVE-2023-47827
Events Addon for Elementor <= 2.1.2 - Missing Authorization
Medium
CVE-2023-47790
Pz-LinkCard <= 2.5.2 - Cross-Site Request Forgery via page_cacheman
Medium
b6c5f933-b71b-4475-abdf-4cffff2a1a6c
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
Medium
b6048088-c11c-4741-8dde-da707f8f84f2
Wordpress File Upload 4.24.0 - Cross-Site Request Forgery
Medium
CVE-2023-47787
WooCommerce Bookings <= 2.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-47765
CodeBard's Patron Button and Widgets for Patreon <= 2.1.9 - Cross-Site Request Forgery
Medium
CVE-2023-5940
WP Not Login Hide <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
9d986739-d6a5-491d-948f-4c58af75369a
Restaurant & Cafe Addon for Elementor <= 1.5.2 - Cross-Site Request Forgery
Medium
CVE-2023-47792
Big File Uploads <= 2.1.1 - Cross-Site Request Forgery via actions
Medium
CVE-2023-47785
LayerSlider <= 7.7.9 - Cross-Site Request Forgery
Medium
CVE-2023-47780
EasyAzon – Amazon Associates Affiliate <= 5.1.0 - Missing Authorization on AJAX actions
High
8a6f7952-cb64-4cff-aae7-0f03692cd95f
WP Courses LMS <= 3.2.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2023-47769
WP Maintenance <= 6.1.3 - IP Restriction Bypass
Medium
CVE-2023-5955
Contact Form Email <= 1.3.43 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-47772
Slider Revolution <= 6.6.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
7319293e-f921-46d1-aea6-2578d1a251a7
avalex – Automatisch sichere Rechtstexte <= 3.0.8 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.