Medium
CVE-2023-36518
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-36522
Quiz Expert – Easy Quiz Maker, Exam and Test Manager <= 1.5.0 - Cross-Site Request Forgery
Medium
CVE-2023-36523
Email download link <= 3.7 - Unauthenticated Sensitive Information Exposure
High
CVE-2023-3105
LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Medium
20910787-b99d-475e-acc9-cc2bb669aa56
Waitlist Woocommerce ( Back in stock notifier ) <= 2.5.2 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2022-45828
NOO Timetable <= 2.1.3 - Cross-Site Request Forgery
Unrated
786
one vote - XSS (Cross Site Scripting)
Critical
CVE-2021-31635
jFinal Server-Side Template Injection vulnerability
High
CVE-2023-3041
Autochat Automatic Conversation <= 1.1.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-34013
Poll Maker <= 4.6.2 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2023-2329
WooCommerce Google Sheet Connector < 1.3.6 - Cross-Site Request Forgery
Medium
CVE-2023-36511
WooCommerce Order Barcodes <= 1.6.4 - Cross-Site Request Forgery
Medium
CVE-2023-36512
AutomateWoo <= 5.7.5 - Missing Authorization
Medium
CVE-2023-1893
Login Configurator <= 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-1844
Subscribe2 <= 10.40 - Missing Authorization
Medium
CVE-2023-3371
EmbedPress <= 3.7.3 - Sensitive Information Exposure
Medium
CVE-2023-36514
WooCommerce Ship to Multiple Addresses <= 3.8.5 - Cross-Site Request Forgery
Medium
CVE-2023-2330
Caldera Forms Google Sheets Connector <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2023-3412
Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite <= 1.0.0 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2023-3178
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Arbitrary Log Deletion
Medium
CVE-2023-24391
ApplyOnline – Application Form Builder and Manager <= 2.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36513
AutomateWoo <= 5.7.5 - Cross-Site Request Forgery
Medium
CVE-2023-0439
NEX-Forms - Ultimate Form Builder <= 8.4.3 - Authenticated Stored Cross-Site Scripting via Form Name
Medium
CVE-2023-3407
Subscribe2 <= 10.40 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.