Medium
CVE-2023-25958
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2022-46819
Continuous announcement scroller <= 13.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-22701
Ebook Store <= 5.775 - Missing Authorization via ebook_store_export_orders
Medium
CVE-2023-22717
FormCraft <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fcb shortcode
Medium
CVE-2022-47423
WP-dTree <= 4.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-23673
I Recommend This <= 3.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-30779
Query Wrangler <= 1.5.51 - Reflected Cross-Site Scripting via page parameter
Medium
CVE-2022-46857
SiteAlert (Formerly WP Health) <= 1.9.7 - Cross-Site Request Forgery
Medium
CVE-2023-23676
File Gallery <= 1.8.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via file_gallery_shortcode
Medium
CVE-2023-30871
Stock Exporter for WooCommerce <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-23682
EZP Maintenance Mode <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-23654
SparkPost <= 3.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2022-47134
Gallery Metabox <= 1.5 - Cross-Site Request Forgery via gallery_remove
Medium
CVE-2023-22720
WP Links Page <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-47428
Booking calendar, Appointment Booking System <= 3.2.6 - Authenticated (Administrator+) SQL Injection via *_selected
Medium
CVE-2023-22685
Category Specific RSS feed Subscription <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2022-45371
ShopEngine <= 4.1.1 - Cross-Site Request Forgery via get_product
Medium
CVE-2023-23688
Social Share Boost <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via ssboost shortcode
High
CVE-2023-1019
Help Desk WP <= 1.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-23683
White Label Branding for Elementor Page Builder <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-1890
Tablesome <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-25468
Reservation.Studio widget <= 1.0.11 - Cross-Site Request Forgery via plugin settings
Medium
CVE-2022-46814
Kodex Posts likes <= 2.4.3 - Cross-Site Request Forgery
Medium
75824b96-8674-4340-9e56-b0cb0f52503d
Robokassa payment gateway for Woocommerce <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.