High
CVE-2022-47146
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-26528
Shipyaari Shipping Management <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-46852
WP Table Builder – WordPress Table Plugin <= 1.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23876
wpDataTables <= 2.1.49 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-25979
Video Gallery – YouTube Gallery <= 1.7.6 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-23708
Visualizer <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23881
Circles Gallery <= 1.0.10 - Authenticated (Admin+) Stored Cross-Site Scripting via Admin Settings
High
CVE-2023-25988
Video Gallery – YouTube Gallery <= 1.7.6 - Missing Authorization
Medium
CVE-2023-23713
Theme Tweaker <= 5.20 - Cross-Site Request Forgery
Medium
CVE-2023-22683
Clio Grow <= 1.0.0 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-25978
Protected Posts Logout Button <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-47143
Multiple Page Generator Plugin <= 3.3.9 - Cross-Site Request Forgery
Critical
CVE-2023-0037
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters
Medium
CVE-2023-23809
Stock market charts from finviz <= 1.0.1 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
5c7edfad-b45b-4297-876d-a063e02af0bf
Top 10 – Popular posts plugin for WordPress <= 3.2.3 - Cross-Site Request Forgery via tptn_ajax_clearcache
Medium
CVE-2022-46851
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 3.1.20 - Cross-Site Request Forgery in add_to_favorite
Medium
CVE-2023-23820
ProfilePress <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23785
Exquisite PayPal Donation <= v2.0.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4652
Video Background <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23816
Sitemap Index <= 1.2.3 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23887
Easy Google Analytics for WordPress <= 1.6.0 - Cross-Site Request Forgery
Medium
37b5fcfd-654b-4151-9494-551799464c7c
Contextual Related Posts <= 3.3.1 - Missing Authorization in crp_ajax_clearcache
High
CVE-2023-26326
BuddyForms <= 2.7.7 - PHAR Deserialization
Critical
CVE-2023-25699
Live Streaming - Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.