Medium
CVE-2023-23810
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-0762
Clock In Portal <= 2.1 - Cross-Site Request Forgery to Designation Deletion
Medium
CVE-2023-30785
Video Grid <= 1.21 - Reflected Cross-Site Scripting
Medium
CVE-2023-1169
OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload
Medium
CVE-2023-2159
CMP – Coming Soon & Maintenance <= 4.1.7 - Maintenance Mode Bypass
Medium
CVE-2023-2085
Essential Blocks <= 4.0.6 - Missing Authorization via templates
Medium
CVE-2023-1869
YourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23794
Semalt Blocker <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
a3b164e0-de2e-40d5-935e-31f5bebd87cf
WP-FormAssembly <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2086
Essential Blocks <= 4.0.6 - Missing Authorization via template_count
Medium
CVE-2023-1915
Thumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting
High
CVE-2022-3342
Jetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization
Medium
CVE-2022-33961
YellowPencil Visual CSS Style Editor <= 7.5.8 - Reflected Cross-Site Scripting liveLink
Medium
CVE-2022-41987
BadgeOS <= 3.7.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-23873
BBSpoiler <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2009
Pretty Url < 1.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-30786
Captcha Them All <= 1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0763
Clock In Portal <= 2.1 - Cross-Site Request Forgery to Holidays Deletion
Medium
CVE-2023-30783
Smart WooCommerce Search <= 2.5.0 - Missing Authorization
Medium
CVE-2023-2169
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-0761
Clock In Portal <= 2.1 - Cross-Site Request Forgery To Staff Deletion
Medium
CVE-2023-1614
WP Custom Author URL <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-30873
WP Docs <= 1.9.8 - Cross-Site Request Forgery to folder management
Medium
CVE-2023-30782
Church Admin <= 3.7.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.