Medium
CVE-2023-46632
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-31077
Export WP Page to Static HTML/CSS <= 2.1.9 - Cross-Site Request Forgery via Multiple AJAX Actions
Medium
CVE-2023-46637
Generate Dummy Posts <= 1.0.0 - Missing Authorization
Medium
CVE-2023-46621
User Avatar <= 1.4.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-52147
All In One WP Security <= 5.2.4 - Protection Bypass of Renamed Login Page via URL Encoding
Medium
CVE-2023-46628
WP Word Count <= 3.2.4 - Missing Authorization via calculate_statistics
Medium
CVE-2023-46643
Download CloudNet360 <= 3.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-46629
Remove Add to Cart WooCommerce <= 1.4.4 - Cross-Site Request Forgery to Settings Modification
Medium
CVE-2023-46640
Medialist <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-46625
Autolinks Manager <= 1.10.04 - Cross-Site Request Forgery
Medium
CVE-2023-46642
SAHU TikTok Pixel for E-Commerce <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46627
WP Simple HTML Sitemap <= 2.2 - Reflected Cross-Site Scripting via id
Medium
CVE-2023-46639
kk Star Ratings <= 5.4.5 - Missing Authorization
Medium
CVE-2023-46636
Custom Header Images <= 1.2.1 - Cross-Site Request Forgery
High
CVE-2023-46630
Admin and Site Enhancements (ASE) <= 5.7.1 - Password Protection Mode Security Feature Bypass
Medium
CVE-2023-5705
VK Filter Search <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-46607
WP iCal Availability <= 1.0.3 - Missing Authorization
Medium
CVE-2023-46608
DoLogin Security <= 3.7.1 - Missing Authorization via REST Endpoints
Medium
CVE-2023-46610
Quill Forms <= 3.3.0 - Missing Authorization
High
CVE-2023-5311
WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification
Medium
CVE-2023-49836
Cookie Bar <= 2.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46614
WP Helper Premium <= 4.5.1 - Cross-Site Request Forgery via whp_fields
Medium
CVE-2023-46616
Draw Attention <= 2.0.15 - Improper Access Control via register_cpt
Medium
CVE-2023-46605
Convertful – Your Ultimate On-Site Conversion Tool <= 2.5 - Missing Authorization via add_woo_coupon
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.