Medium
a9c41797-b256-47de-a783-18df36dd2234
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-32515
Custom Field Suite <= 2.6.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-32518
WP Chinese Conversion <= 1.1.16 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2023-2237
WP Replicate Post <= 4.0.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-32510
Order Your Posts Manually <= 2.2.5 - Reflected Cross-Site Scripting via '_user_request'
High
CVE-2023-0900
AP Pricing Tables Lite <= 1.1.6 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-32513
GiveWP <= 2.25.3 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2023-32507
Woo Custom Emails <= 2.2 - Missing Authorization to Unauthenticated Settings Change
Medium
CVE-2023-23667
Brands for WooCommerce <= 3.7.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-32508
Order Your Posts Manually <= 2.2.5 - Authenticated (Administrator+) SQL Injection via 'sortdata'
Medium
CVE-2023-32506
Link Whisper Free <= 0.6.3 - Missing Authorization via init()
Medium
CVE-2022-44633
YITH WooCommerce Gift Cards Premium <= 3.23.1 - Missing Authorization
Medium
CVE-2023-2224
SEO By 10Web <= 1.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
1a6bc58f-9cf3-4d3f-a10e-0ccde0b890a3
Injection Guard <= 1.2.1 - Cross-Site Request Forgery to Whitelist Update
Medium
CVE-2023-32520
WCP Contact Form <= 3.1.0 - Missing Authorization via downloadCsv
High
CVE-2023-32511
Booking Ultra Pro <= 1.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-31141
OpenSearch issue with fine-grained access control during extremely rare race conditions
Critical
CVE-2023-31126
Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml
Critical
CVE-2023-32071
XWiki Platform vulnerable to RXSS via editor parameter - importinline template
High
CVE-2023-31143
Mage-ai missing user authentication
High
CVE-2023-2591
teampass vulnerable to code injection
Medium
CVE-2023-28749
CM On Demand Search And Replace <= 1.3.0 - Cross-Site Request Forgery
Low
CVE-2023-32497
Block Referer Spam <= 1.1.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
f68ac2b8-33dc-4cc2-b0f3-8777450e39f9
Pro Mime Types - Manage file media types <= 1.0.7 - Cross-Site Request Forgery via pmt_settings_section_callback_tab_1
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.