Medium
CVE-2023-47531
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Medium
CVE-2023-5982
UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update
Medium
CVE-2023-5006
WP Discord Invite < 2.5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-47520
Responsive Column Widgets <= 1.2.7 - Reflected Cross-Site Scripting via tab
Medium
CVE-2023-47523
Auto Tag Creator <= 1.0.2 - Missing Authorization via tag_save_settings_callback
Medium
CVE-2023-47515
Seers <= 8.1.1 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-47244
Email Marketing for WooCommerce by Omnisend <= 1.13.8 - Sensitive Information Exposure
Medium
CVE-2023-47656
ANAC XML Bandi di Gara <= 7.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-47529
Cloud Templates & Patterns collection <= 1.2.2 - Sensitive Information Exposure via Log File
Medium
CVE-2023-47662
Live Gold Price & Silver Price Charts Widgets <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-33998
Easy Social Icons <= 3.2.4 - Missing Authorization via cnss_save_ajax_order
High
CVE-2023-32095
Rename Media Files <= 1.0.1 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2023-47533
Countdown and CountUp, WooCommerce Sales Timer <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-47553
UserHeat Plugin <= 1.1.10 - Cross-Site Request Forgery
Medium
CVE-2023-47548
Integrate Google Drive <= 1.3.2 - Open Redirect via state
Medium
CVE-2023-47243
MSHOP MY SITE <= 1.1.7 - Missing Authorization via update_settings
Medium
CVE-2023-34375
Seo By 10Web <= 1.2.9 - Reflected Cross-Site Scripting
High
CVE-2023-47669
Profile Builder <= 3.10.3 - Cross-Site Request Forgery via pms-cross-promotion.php
Medium
CVE-2023-47521
Q2W3 Post Order <= 1.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-47240
CBX Map for Google Map & OpenStreetMap <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47545
Forms for Mailchimp by Optin Cat <= 2.5.4 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2023-47506
Master Slider Pro <= 3.6.5 - Authenticated (Editor+) SQL Injection
Medium
CVE-2023-47510
WPDBSpringClean <= 1.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-47514
Star CloudPRNT for WooCommerce <= 2.0.3 - Unauthenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.