High
CVE-2023-45071
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-45049
YouTube Playlist Player <= 4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-44263
Social Metrics <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5337
Contact form Form For All <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-24385
Media Library Assistant <= 3.11 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-44150
ProfilePress <= 4.13.2 - Information Disclosure via Debug Log
Medium
CVE-2023-44990
WOLF <= 1.0.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5334
WP Responsive header image slider <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44986
Abandoned Cart Lite for WooCommerce <= 5.15.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
39003835-80df-49c7-982a-346bf328565c
WPGetAPI 2.1.0 - 2.2.1 - Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2023-44987
Timely Booking Button <= 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-44246
Shockingly Simple Favicon <= 1.8.2 - Cross-Site Request Forgery
Medium
CVE-2023-44237
WP Site Protector <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2023-44240
Timthumb Vulnerability Scanner <= 1.54 - Cross-Site Request Forgery
Medium
CVE-2023-5292
Advanced Custom Fields: Extended <= 0.8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44245
Contractor Contact Form Website to Workflow Tool <= 4.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-44233
FooGallery <= 2.2.44 - Cross-Site Request Forgery
Medium
CVE-2023-44239
WWM Social Share On Image Hover <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-44471
Backend Localization <= 2.1.10 - Cross-Site Request Forgery
Medium
a5bc6097-d6ed-4598-b3c8-9159d5ce04ee
WP Custom Admin Interface <= 7.32 - Cross-Site Request Forgery to Transients Deletion
Medium
CVE-2023-44235
WP Captcha <= 2.0.0 - CAPTCHA Bypass
Medium
CVE-2023-44476
CopyRightPro <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-44236
WP Captcha <= 2.0.0 - Cross-Site Request Forgery
Medium
CVE-2023-44238
Remove slug from custom post type <= 1.0.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.