Medium
a7beb9b3-3e4e-4aa2-b174-ecd9307cb3d0
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,596
High
9c8b0de4-e3ee-4711-8f27-097dee843dd8
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.13.44 - Missing Authorization in Settings Import to Stored Cross-Site Scripting
Medium
CVE-2023-0364
real.Kit <= 5.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-46816
Booking Ultra Pro <= 1.1.6 - Cross-Site Request Forgery
Medium
8b421330-dd3c-4af0-9f42-95430117eb9b
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'saveRedirectSettings' function
Medium
84d43356-274e-42d5-ac40-10a34effce8d
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'addRedirectRule' function
Medium
CVE-2023-25056
Feed Them Social <= 3.0.2 - Cross-Site Request Forgery
Medium
71caa071-d279-4807-88ad-a71673b9d17d
Redirect Redirection <= 1.1.3 - Missing Authorization in 'instantEditRedirect' function
Medium
CVE-2023-25963
JS Job Manager <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title
Medium
5d1d012a-46cd-4c86-ac6f-993736a91acb
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'statusBulkEdit' function
Medium
CVE-2022-46813
Advanced Database Cleaner <= 3.1.1 - Cross-Site Request Forgery via aDBc_save_settings_callback
Medium
CVE-2023-0365
React Webcam <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
53667fd6-0d12-400d-b3a1-7cee305a2bc2
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'bulkDelete' function
Medium
CVE-2023-25971
Educare – Students & Result Management System <= 1.4.3 - Cross-Site Request Forgery
Medium
4c953a46-d2ae-41f7-a940-d23b011d9eca
Redirect Redirection <= 1.1.3 - Missing Authorization in 'SaveSettings' function
Medium
CVE-2022-3894
WP OAuth Server <= 4.2.3 - Cross-Site Request Forgery to Arbitrary Post Deletion (wo_ajax_remove_client)
Medium
CVE-2023-26017
Jobs for WordPress <= 2.5.10.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0145
Saan World Clock <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Low
CVE-2023-25974
wp2syslog <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
29333999-ffe3-4cd0-a537-be98168cb2ee
Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'SaveSettings' function
Medium
CVE-2022-4148
WP OAuth Server <= 4.2.5 - Authenticated (Subscriber+) Arbitrary Client Deletion (wo_ajax_remove_client)
Medium
CVE-2023-26011
Read More Excerpt Link <= 1.5 - Cross-Site Request Forgery
Medium
1c22717f-494e-4f62-9691-ee5a3366a487
Redirect Redirection <= 1.1.3 - Missing Authorization in 'deleteRedirect' function
Medium
140a6fd3-e446-44ea-94eb-9c8d12f7b7ed
Redirect Redirection <= 1.1.3 - Missing Authorization in 'addRedirect' function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.