Medium
CVE-2023-6798
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-6990
Weaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-21747
WP ERP <= 1.12.8 - Authenticated (Accounting manager+) SQL Injection
Medium
CVE-2023-7019
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder <= 2.6.8 - Missing Authorization
Medium
CVE-2023-6801
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-52211
WP Job Manager <= 2.0.0 - Missing Authorization
Medium
CVE-2023-52220
Google Analytics by Monster Insights <= 8.21.0 - Missing Authorization
Medium
CVE-2023-52212
WP Job Manager <= 2.0.0 - Cross-Site Request Forgery
High
CVE-2024-21743
Houzez Login Register <= 3.2.5 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Critical
CVE-2023-52218
WooCommerce Tranzila Gateway <= 1.0.8 - Unauthenticated PHP Object Injection
Medium
CVE-2023-52231
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Medium
CVE-2023-52199
ActivityPub <= 1.0.5 - Missing Authorization
Medium
CVE-2024-21746
Wp Ultimate Review <= 2.3.6 - IP Spoofing
Medium
CVE-2023-6781
Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields
High
CVE-2023-52219
Gecka Terms Thumbnails <= 1.1 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-6632
Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-21748
Icegram <= 3.1.21 - Missing Authorization
Medium
CVE-2023-6493
Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save
Medium
CVE-2023-7199
Relevanssi <= 4.21.2 (Free) and < 2.25.0 (Premium) - Missing Authorization to Unauthorized Post Access
Medium
CVE-2024-0212
Cloudflare <= 4.12.2 - Missing Authorization via initProxy
Medium
CVE-2024-21752
Ajax Search Lite <= 4.11.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-52194
oEmbed Gist <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-52216
JS & CSS Script Optimizer <= 0.3.3 - Cross-Site Request Forgery
Medium
CVE-2023-6530
TJ Shortcodes 0.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.