Medium
CVE-2023-30481
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-3936
Blog2Social: Social Media Auto Post & Scheduler <= 7.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-38515
Church Admin <= 3.7.56 - Server-Side Request Forgery via church_admin_import_csv
Medium
CVE-2023-3962
Winters <= 1.4.3 - Prototype Pollution to Reflected Cross-Site Scripting
Medium
CVE-2023-3957
ACF Photo Gallery Field <= 1.9 - Authenticated (Subscriber+) Arbitrary Usermeta Update
Medium
5d01548e-91bf-44db-83dc-10c7d5962f9b
Optimize Database after Deleting Revisions <= 5.0.110 - Cross-Site Request Forgery via 'odb_csv_download'
Medium
CVE-2023-3965
nsc <= 1.0 - Prototype Pollution to Reflected Cross-Site Scripting
Critical
CVE-2023-3956
InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver
Medium
CVE-2023-27435
HTTP Auth <= 0.3.2 - Cross-Site Request Forgery
Medium
CVE-2023-24380
Simple Wp Sitemap <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2023-25980
Optimize Database after Deleting Revisions <= 5.1.1 - Cross-Site Request Forgery via 'odb_start_manually'
Medium
CVE-2023-25989
Meks Smart Social Widget <= 1.6 - Cross-Site Request Forgery via meks_remove_notification
Medium
CVE-2023-25463
wp tell a friend popup form <= 7.1 - Cross-Site Request Forgery via 'TellAFriend_admin'
Medium
CVE-2023-39161
Discussion Board <= 2.4.8 - Authenticated (Subscriber+) Content Injection
Medium
CVE-2023-39162
User Email Verification for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-39158
Woocommerce Category Banner Management <= 2.4.1 - Cross-Site Request Forgery
Medium
CVE-2022-47182
APIExperts Square for WooCommerce <= 4.4.1 - Missing Authorization
Medium
CVE-2023-38503
Incorrect Permission Checking for GraphQL Subscriptions
Medium
CVE-2023-38501
copyparty vulnerable to reflected cross-site scripting via k304 parameter
Medium
CVE-2023-37902
ecrecover can return undefined data if signature does not verify
High
CVE-2023-36826
Improper authorization on debug and artifact file downloads
Medium
ghsa-m8fw-p3cr-6jqc
Cross-Site Scripting in CKEditor4 WordCount Plugin
Medium
CVE-2023-38435
Cross-site Scripting in healthcheck webconsole plugin
Medium
CVE-2023-38500
By-passing Cross-Site Scripting Protection in HTML Sanitizer
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.