High
CVE-2023-3166
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-0721
Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection
High
CVE-2023-3023
WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'
Medium
CVE-2023-1807
Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Cross-Site Request Forgery via toggle_widget
Medium
CVE-2023-2869
WP-Members Membership <= 3.4.7.3 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-0708
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_first_name shortcode
Medium
CVE-2023-2189
Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Missing Authorization in toggle_widget
Medium
CVE-2023-0691
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode
Medium
CVE-2023-0710
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_thankyou shortcode
Medium
CVE-2023-2450
FiboSearch - AJAX Search for WooCommerce <= 1.23.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0688
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode
High
CVE-2023-1615
Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated(Subscriber+) SQL Injection
Medium
CVE-2023-0709
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcode
Medium
CVE-2023-0693
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_transaction_id' shortcode
Medium
CVE-2023-0695
Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf shortcode
Medium
CVE-2023-0694
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode
High
CVE-2023-30198
Improper Limitation of a Pathname to a Restricted Directory in Webbax - Winbiz Payment module for PrestaShop
Critical
CVE-2023-33496
xxl-rpc deserialization vulnerability
High
CVE-2023-33510
Jeecg P3 Biz Chat allows remote attackers to read arbitrary files
Medium
CVE-2023-3142
Microweber Cross-site Scripting vulnerability
Medium
e3adcb85-efc5-429c-8a06-9bfb472d668f
Easy Digital Downloads <= 3.1.1.4.2 - Cross-Site Request Forgery via edd_trigger_upgrades
High
CVE-2023-34007
Download Monitor <= 4.8.3 - Authenticated(Subscriber+) Arbitrary File Upload via upload_file
Medium
CVE-2023-34382
Dokan <=3.7.19 - Authenticated(Shop Manager+) PHP Object Injection via create_dummy_vendor
Medium
CVE-2023-32683
Synapse has URL deny list bypass via oEmbed and image URLs when generating previews
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.