High
CVE-2023-24998
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,595
Critical
CVE-2023-25613
Apache Kerby LdapIdentityBackend LDAP Injection vulnerability
High
CVE-2016-15026
dd-plist XML External Entitly vulnerability
Medium
CVE-2016-15025
generator-hottowel Cross-site Scripting vulnerability
Medium
CVE-2022-47141
WP Dynamic Keywords Injector <= 2.3.15 - Cross-Site Request Forgery
Medium
CVE-2022-47154
CSS JS Manager <= 2.4.49 - Cross-Site Request Forgery
Medium
CVE-2023-22713
Gutenberge Blocks <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23874
Ditty <= 3.0.32 - Authenticated (Contributor+) Stored Cross-Scripting via Shortcode
Medium
CVE-2022-41633
Community by PeepSo <= 6.0.2.0 - Cross Site Request Forgery
Medium
CVE-2023-23808
Sponsors Carousel <= 4.02 - Authenticated (Admin+) Stored Cross-Site Scripting in show
Medium
CVE-2023-23705
WordPress Books Gallery <= 4.4.8 - Cross-Site Request Forgery leading to Plugin Settings Changes
Medium
CVE-2022-47157
WP Custom Fields Search <= 1.2.34 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0066
Companion Sitemap Generator <= 4.5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
ca8f4f6b-756b-4511-9e48-e41a872a9dad
Contextual Related Posts <= 3.3.1 - Cross-Site Request Forgery in crpClearCache
Medium
CVE-2022-46853
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 5.0.4 - Cross-Site Request Forgery in rttpg_spare_me
Medium
CVE-2023-23875
Binge Site Verification using Meta Tag <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Admin Settings
Medium
CVE-2023-25994
Publish to Schedule <= 4.4.2 - Cross-Site Request Forgery leading to Plugin Option Changes
High
CVE-2022-47146
Real Estate 7 Theme <= 3.3.1 - Stored Cross-Site Scripting
Medium
CVE-2023-26528
Shipyaari Shipping Management <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-46852
WP Table Builder – WordPress Table Plugin <= 1.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23876
wpDataTables <= 2.1.49 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-25979
Video Gallery – YouTube Gallery <= 1.7.6 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-23708
Visualizer <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23881
Circles Gallery <= 1.0.10 - Authenticated (Admin+) Stored Cross-Site Scripting via Admin Settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.