Medium
CVE-2023-48335
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-48327
WC Vendors Marketplace <= 2.4.7 - Authenticated (Shop manager+) SQL Injection via search dates
Medium
CVE-2023-48323
Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax()
Medium
CVE-2023-48324
Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax()
Medium
CVE-2023-48286
Accept Stripe Payments <= 2.0.79 - Insecure Direct Object Reference
Medium
CVE-2023-48330
Bulk Comment Remove <= 2 - Cross-Site Request Forgery via brc_admin()
Medium
CVE-2023-48329
Fast Custom Social Share by CodeBard <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6136
Debug Log Manager <= 2.2.1 - Missing Authorization
Medium
CVE-2023-48328
NextGEN Gallery <= 3.37 - Cross-Site Request Forgery
Medium
CVE-2023-48332
Mail Bank - #1 Mail SMTP Plugin for WordPress <= 4.0.14 - Missing Authorization
Medium
CVE-2023-48285
Accept Stripe Payments <= 2.0.79 - Unauthenticated Content Injection
Medium
CVE-2023-41128
WP Roadmap <= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6137
Frontier Post <= 6.1 - Cross-Site Request Forgery
Medium
CVE-2023-48317
Display Custom Post <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-48320
Video Player <= 1.5.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38400
Enfold <= 5.6.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-48739
Porto Theme - Functionality <= 2.11.1 - Missing Authorization
High
CVE-2023-48319
Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation
High
CVE-2023-48742
License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-48331
MyBookTable Bookstore <= 3.3.3 - Cross-Site Request Forgery
High
CVE-2023-5504
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
Medium
dbf54852-f3fe-4c9e-9348-44a73f9a8131
WooCommerce Parcel Pro <= 1.6.11 - Cross-Site Request Forgery
Medium
CVE-2023-48277
Super Progressive Web Apps <= 2.2.21 - Missing Authorization
Medium
c146f89c-5df3-4aaf-b880-0ce6016dfb6d
GS Team Members <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.