Medium
CVE-2023-5641
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-51396
Brizy <= 2.4.29 - Cross-Site Scripting
Medium
CVE-2023-5239
Security & Malware scan by CleanTalk <= 2.120 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2023-5209
WordPress Online Booking and Scheduling Plugin – Bookly <= 22.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-5325
Woocommerce Vietnam Checkout <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5506
ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax
Medium
CVE-2023-5577
Bitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47666
Code Snippets <= 3.5.0 - Cross-Site Request Forgery via load
Medium
CVE-2023-5525
Limit Login Attempts Reloaded <= 2.25.25 - Missing Authorization
Medium
CVE-2023-5669
Featured Image Caption <= 0.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5743
Telephone Number Linker <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4642
kk Star Ratings <= 5.4.5 - Race Condition to Multiple User Voting
Low
CVE-2023-6160
LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
Medium
CVE-2023-47231
ShortCodes UI <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47181
Email Templates <= 1.4.2 - Cross-Site Request Forgery via send_test_email
Medium
e881ba2f-0e88-4c7b-aa0d-84e816019db9
Product Catalog Mode For Woocommerce <= 5.0.2 - Missing Authorization
High
CVE-2023-47224
WP Travel <= 7.7.0 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-47239
Easy PayPal Shopping Cart <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47229
Download Top 25 Social Icons <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47225
Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-47191
Youzify <= 1.2.2 - Insecure Direct Object Reference
Medium
CVE-2023-47238
Top 10 <= 3.3.2 - Cross-Site Request Forgery via edit_count_ajax
Medium
CVE-2023-47228
Layer Slider <= 1.1.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5942
Medialist <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.