Medium
CVE-2023-0075
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-23864
Very Simple Google Maps <= 2.8.4 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-22691
Category Specific RSS feed Subscription <= 2.1 - Cross-Site Request Forgery
High
CVE-2023-23979
Quick Event Manager <= 9.7.4 - Unauthenticated Stored Cross Site Scripting
Medium
CVE-2023-23996
ProfilePress <= 4.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23980
MailOptin <= 1.2.54.0 - Authenticated (Admin+) Cross Site Scripting
High
CVE-2023-23813
My Calendar <= 3.4.3 - Cross-Site Request Forgery
Low
CVE-2023-23971
WP Time Slots Booking Form <= 1.1.81 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-23686
Simple Staff List <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47589
CTT Expresso para WooCommerce <= 3.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-23986
Reviews and Rating – Google My Business <= 4.14 - Missing Authorization
Medium
CVE-2023-23975
Quick Event Manager <= 9.7.4 - Missing Authorization Checks
Medium
CVE-2023-23985
Quiz Maker <= 6.3.9.4 - Content Spoofing
Medium
CVE-2023-23895
WP Time Slots Booking Form <= 1.1.82 - Improper Authorization Checks
Medium
CVE-2023-23728
WP Flipclock <= 1.7.4 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-23978
WP Client Reports <= 1.0.16 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-23988
My Tickets <= 1.9.11 - Authorization Bypass
Medium
CVE-2023-23991
Booking Calendar <= 9.4.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-23987
User Registration <= 2.3.0 - Authenticated (Administrator+) Stored Cross Site Scripting
Medium
CVE-2023-23982
WPFrom Email <= 1.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47595
WP Go Maps <= 9.0.15 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2022-47594
Essential Blocks for Gutenberg <= 3.8.5 - Cross-Site Request Forgery
Medium
CVE-2023-23973
Contact Us Page – Contact People <= 3.7.0 - Cross Site Request Forgery
Medium
CVE-2023-22702
WPMobile.App — Android and iOS Mobile Application <= 11.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.