Medium
CVE-2023-27481
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2023-23638
Apache Dubbo vulnerable to Deserialization of Untrusted Data
Critical
CVE-2023-1269
Easy!Appointments uses hard-coded credentials
Critical
CVE-2023-24780
SQL Injection in Funadmin
High
CVE-2023-27476
OWSLib vulnerable to XML External Entity (XXE) Injection
Medium
CVE-2023-27413
W4 Post List <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'w4pl[no_items_text]'
Medium
CVE-2023-0399
Image Over Image For WPBakery Page Builder <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23668
GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode
Medium
cb7ec7ad-797b-4a5c-9b1c-31284083faef
GiveWP <= 2.25.1 - Cross-Site Request Forgery via save
Medium
CVE-2023-25450
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush
Medium
a9939ffe-a5d5-45cb-b673-665acf1ff09d
GiveWP <= 2.25.1 - Cross-Site Request Forgery via process_bulk_action
Medium
CVE-2023-27631
Daily Prayer Time <= 2023.03.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-27632
Daily Prayer Time <= 2023.03.08 - Cross-Site Request Forgery
Medium
CVE-2023-25486
Clone <= 2.3.7 - Missing Authorization via wp_ajax_tifm_save_decision
Medium
CVE-2023-27418
Side Menu Lite <= 4.0 - Cross-Site Request Forgery to Item Deletion
High
CVE-2023-22719
GiveWP <= 2.25.1 - Unauthenticated CSV Injection
Medium
CVE-2023-25449
cformsII <= 15.0.4 - Cross-Site Request Forgery leading to Settings Updates
Medium
CVE-2023-27417
Affiliate Super Assistent <= 1.5.1 - Cross-Site Request Forgery to Settings Update and Cache Clearing
Medium
533f71d5-823d-45eb-8ecf-76afafd2a5d3
Popup Maker <= 1.18.0 - Cross-Site Request Forgery via init
Medium
3d12d692-231b-4e15-a119-80fd74566af4
Webmention <= 4.0.8 - Reflected Cross-Site Scripting via 'replytocom'
Medium
343cbdda-2ec5-437f-b563-96c61663314d
Updraft Plus <= 1.22.24 - Information Disclosure via updraft_ajaxrestore
Medium
314d3e0c-ba29-4795-a646-40e0acfc3405
Clone <= 2.3.7 - Cross-Site Request Forgery via wp_ajax_tifm_save_decision
Medium
CVE-2023-23802
HT Easy GA4 ( Google Analytics 4 ) <= 1.0.6 - Cross-Site Request Forgery via plugin_activation
Medium
2a0381b1-9b63-41cb-8125-d22274b98867
GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.