Medium
CVE-2023-51692
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2023-51408
WP Optin Wheel <= 1.4.2 - Sensitive Information Exposure via Log File
Medium
CVE-2023-51485
Pay with Vipps for WooCommerce <= 1.14.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-51424
WebinarIgnition <= 3.05.0 - Missing Authorization to Unauthenticated Privilege Escalation
Medium
CVE-2023-51480
Active Products Tables for WooCommerce <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-51669
Product Code for WooCommerce <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-51496
WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization
Medium
CVE-2023-51523
WooCommerce Easy Duplicate Product <= 0.3.0.7 - Missing Authorization via wedp_duplicate_product_action
Medium
CVE-2023-51369
Customize My Account for WooCommerce <= 1.8.3 - Cross-Site Request Forgery via restore_my_account_tabs
Medium
CVE-2023-51357
Conversios.io <= 6.5.0 - Missing Authorization
Medium
CVE-2023-50893
Impreza <= 8.17.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-50877
Product Filter by WBW <= 2.5.0 - Missing Authorization via getListForTbl
High
CVE-2023-51355
WC Marketplace <= 4.0.23 - Missing Authorization via mvx_save_dashpages
Medium
CVE-2023-6556
FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-50861
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.3 - Cross-Site Request Forgery
Medium
CVE-2023-50853
Advanced Form Integration <= 1.75.0 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50856
Funnel Builder for WordPress by FunnelKit <= 2.14.3 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50857
Automation By Autonami <= 2.6.1 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50831
CURCY – Multi Currency for WooCommerce <= 2.2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50834
WooCommerce Menu Extension <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6638
GTG Product Feed for Shopping <= 1.2.4 - Missing Authorization to Unauthenticated Plugin Settings Update
High
CVE-2023-6558
Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload
Medium
CVE-2023-49855
BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter <= 1.49.3 - Cross-Site Request Forgery
Medium
CVE-2023-49838
Multiple Themes by KlbTheme <= (Various Versions) - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.