High
f3ebbf7f-61f2-403f-8131-8cedeb13c2d4
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-5559
10Web Booster <= 2.24.14 - Unauthenticated Arbitrary Option Deletion
Medium
CVE-2023-5251
Grid Plus <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete
Medium
CVE-2023-5611
Seraphinite Accelerator (Base, cache only) <= 2.20.31 - Cross-Site Request Forgery
High
caa39613-aaf3-4e47-8866-8fda1f7fc15b
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-5163
Weather Atlas Widget <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5335
Buzzsprout Podcasting <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-46821
GD Security Headers <= 1.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-5234
Related Products for WooCommerce <= 3.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5666
Accordion <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5049
Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5250
Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
Medium
CVE-2023-5566
Simple Shortcodes <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-46823
ImageLinks <= 1.5.4 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-46822
WooCommerce - Store Exporter <= 2.7.2 - Reflected Cross-Site Scripting via 'filter'
Critical
CVE-2023-5199
PHP to Page <= 0.3 - Authenticated (Subscriber+) Local File Inclusion to Remote Code Execution via Shortcode
Medium
CVE-2023-46824
Slick Popup: Contact Form 7 Popup Plugin <= 1.7.14 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5164
Bellows Accordion Menu <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5565
Shortcode Menu <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5252
FareHarbor for WordPress <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5315
Google Maps made Simple <= 0.6 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5583
WP Simple Galleries <= 1.34 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2023-5425
Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
High
CVE-2023-5426
Post Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.