Medium
a5368894-3277-47d0-8fad-adfb8df4fa93
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-45769
WP Report Post <= 2.1.2 Reflected Cross-Site Scripting
Medium
CVE-2023-45656
Lazy Load for Videos <= 2.18.2 - Cross-Site Request Forgery
Medium
CVE-2023-45762
Responsive Column Widgets <= 1.2.7 - Open Redirect via responsive_column_widgets_link
High
CVE-2023-45657
Nexter <= 2.0.3 - Authenticated (Subscriber+) SQL Injection via 'to' and 'from'
Medium
CVE-2023-45641
Caret Country Access Limit <= 1.0.2 - Cross-Site Request Forgery
Medium
CVE-2023-45750
Nexter Extension <= 2.0.3 - Reflected Cross-Site Scripting via post and post_id
Medium
CVE-2023-45761
Sendle Shipping <= 5.17 - Reflected Cross-Site Scripting
Medium
CVE-2023-45759
Peter’s Custom Anti-Spam <= 3.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-33214
Taggbox <= 3.3 - Cross-Site Request Forgery
Medium
CVE-2023-45654
Comments Ratings <= 1.1.7 - Cross-Site Request Forgery
Medium
CVE-2023-45764
Scroll post excerpt <= 8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-45756
ApplyOnline – Application Form Builder and Manager <= 2.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-39999
WordPress Core <= 6.3.1 - Authenticated(Contributor+) Sensitive Information Exposure via Comments on Protected Posts
Medium
CVE-2023-45766
Poll Maker <= 4.7.1 - Missing Authorization
Medium
CVE-2023-38000
WordPress Core 5.9-6.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Navigation Attributes
Medium
CVE-2023-45642
Snap Pixel <= 1.5.8 - Cross-Site Request Forgery
Medium
CVE-2023-45643
CPT Shortcode Generator <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-45747
WP Lightbox 2 <= 3.0.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-45650
HTML5 Maps <= 1.7.1.4 - Cross-Site Request Forgery
Medium
CVE-2023-45760
wpDiscuz <= 7.6.3 - Missing Authorization via AJAX actions
Medium
CVE-2023-45644
CPT Shortcode Generator <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-45639
Sort SearchResult By Title <= 10.0 - Cross-Site Request Forgery via settings_page
Medium
CVE-2023-45646
PDF Block <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.