Medium
CVE-2023-23787
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-28988
Direct checkout, Add to cart redirect for Woocommerce <= 2.1.48 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23788
Custom More Link Complete <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-26533
Zippy <= 1.6.1 - Authenticated (Contributor+) Sensitive Information Disclosure
Medium
CVE-2022-46846
Trending/Popular Post Slider and Widget <= 1.5.7 - Cross-Site Request Forgery via wtpsw_post_view_count
Medium
CVE-2023-28990
Viral Mag <= 1.0.9 - Missing Authorization to Arbitrary Plugin Activation
Medium
39a3450e-f3c2-4c89-985d-28e23eb433dd
External Media <= 1.0.36 - Authenticated(Author+) File Upload to Stored Cross-Site Scripting via SVG
Medium
CVE-2023-28995
Configurable Tag Cloud <= 5.2 - Cross-Site Request Forgery via ctc_options_page()
Medium
CVE-2023-28932
WPMobile.App <= 11.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-27639
[CVE-2023-27640][CWE-22] Multiple path traversal in Custom Product Designer (tshirtecommerce) module for PrestaShop
High
CVE-2023-28103
Prototype pollution in matrix-react-sdk
High
CVE-2023-28447
smarty Cross-site Scripting vulnerability in Javascript escaping
Unrated
drupal-contrib-2023-012
drupal/xray_audit - SA-CONTRIB-2023-012
Medium
CVE-2023-28158
Apache Archiva vulnerable to privilege escalation via stored cross-site scripting (XSS)
Medium
CVE-2023-28930
Mobile Banner <= 1.5 - Cross-Site Request Forgery leading to Plugin Settings Changes
Medium
CVE-2023-24389
Social Proof (Testimonial) Slider <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25445
HappyFiles Pro <= 1.8.1 - Missing Authorization
Medium
CVE-2023-28986
Affiliates Manager <= 2.9.20 - Cross-Site Request Forgery via process_bulk_action()
Medium
CVE-2023-1324
Easy Forms for MailChimp <= 6.8.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-28751
Wp Ultimate Review <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b33bf55c-0397-44a2-8c18-ea5f8f1e2ec9
AI ChatBot <= 4.4.7 - Missing Authorization on openai_settings_option_callback
Medium
CVE-2023-1575
Mega Main Menu <= 2.2.2 - Authenticated (Administrator+) Cross-Site Scripting
Critical
CVE-2023-28662
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection
Medium
CVE-2023-28987
Wp Ultimate Review <= 2.0.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.