Medium
CVE-2023-47664
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Medium
CVE-2023-47665
Plainview Protect Passwords <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-47505
Elementor Website Builder <= 3.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_inline_svg()
Medium
CVE-2023-32957
Team Members Showcase <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47667
WP Full Stripe Free <= 7.0.17 - Cross-Site Request Forgery
Medium
CVE-2023-32796
WooCommerce Product Enquiry <= 2.6.0 - Unauthenticated Self-Based Cross-Site Scripting
Medium
CVE-2023-47670
Korea SNS <= 1.6.4 - Cross-Site Request Forgery via kon_tergos_options
Medium
CVE-2023-47673
Post Pay Counter <= 2.789 - Reflected Cross-Site Scripting
Medium
4a134509-8dc0-41ac-9b5c-5b173a1e3c68
Product Catalog Simple <= 1.7.5 - Cross-Site Request Forgery via ic_system_status
Medium
CVE-2023-47671
Vertical scroll recent post <= 14.0 - Cross-Site Request Forgery via vsrp_admin_options
Critical
CVE-2023-46244
XWiki Platform privilege escalation from script right to programming right through title displayer
High
CVE-2023-46243
XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action
Critical
CVE-2023-46242
XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token
Medium
CVE-2023-47552
Image Hover Effects <= 5.5 - Cross-Site Request Forgery
Medium
fb6f4b0b-25b8-4dcd-b002-293ce8ab307e
NitroPack <= 1.9.2 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-47513
ARI Stream Quiz <= 1.3.2 - Authenticated(Contributor+) Content Injection
Medium
CVE-2023-47653
TWB Woocommerce Reviews <= 1.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47644
ProfileGrid <= 5.7.1 - Cross-Site Request Forgery
Medium
CVE-2023-47557
Visitors Traffic Real Time Statistics <= 7.2 - Missing Authorization via multiple AJAX actions
Medium
f3d5bc99-2b55-4e19-8304-e56f3d4a2f1a
Ecwid Ecommerce Shopping Cart <= 6.12.3 - Missing Authorization on multiple functions
Medium
eb94520e-a99d-4e34-b174-e01898de0978
Custom post types <= 4.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47547
Products, Order & Customers Export for WooCommerce <= 2.0.10 - Reflected Cross-Site Scripting via date parameters
Medium
CVE-2023-47660
Product Visibility by Country for WooCommerce <= 1.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47659
Lava Directory Manager <= 1.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.