High
cb105ff0-5085-4813-81a6-b1f0798d576c
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-23663
MainWP Comments Extension <= 4.0.6 - Missing Authorization
High
CVE-2023-23645
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) PHP Code Injection
Critical
CVE-2023-23649
MainWP Links Manager Extension <= 2.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-0385
Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery
Medium
94f7f2d2-e90b-4978-bab8-eee160949567
MainWP UpdraftPlus Extension <= 4.0.6 - Missing Authorization
Medium
CVE-2022-4512
Better Font Awesome <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Critical
CVE-2023-23656
MainWP File Uploader Extension <= 4.1 - Unauthenticated Arbitrary File Upload
Medium
6c563616-e405-4b3e-a70a-543f42118a97
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary Plugin Installation
Medium
CVE-2023-0333
TemplatesNext ToolKit <= 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23650
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
306a9960-7139-4142-a249-4de2b3c4b985
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2023-23660
MainWP Maintenance Extension <= 4.1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-0360
Location Weather <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Critical
CVE-2023-23737
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection
Critical
CVE-2023-22731
Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views
Medium
CVE-2023-22730
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
Medium
CVE-2010-10008
simplesamlphp-module-openidprovider Cross Site Scripting vulnerability
Medium
CVE-2023-23639
MainWP Staging Extension <= 4.0.3 - Missing Authorization to Arbitrary Plugin Activation
Medium
CVE-2023-23746
MainWP WordPress SEO Extension <= 4.0.1 - Missing Authorization to Arbitrary Plugin Activation
Medium
CVE-2023-23655
MainWP Code Snippets Extension <= 4.0.2 - Missing Authorization to Plugin Settings Change
Medium
CVE-2023-22712
TemplatesNext ToolKit <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0060
Responsive Gallery Grid <= 2.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23745
MainWP Boilerplate Extension <= 4.1 - Missing Authorization to Plugin Settings Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.