Medium
CVE-2023-44477
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-44234
WP GPX Map <= 1.7.05 - Missing Authorization
Medium
CVE-2023-44473
Table of Contents Plus <= 2302 - Cross-Site Request Forgery
Medium
CVE-2023-5295
Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-44244
FooGallery <= 2.2.44 - Reflected Cross-Site Scripting
Medium
CVE-2023-44231
Contact Form <= 2.0.11 - Cross-Site Request Forgery
Medium
CVE-2023-44242
Slideshow, Image Slider by 2J <= 1.3.54 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-44475
Add Shortcodes Actions And Filters <= 2.0.9 - Cross-Site Request Forgery
Medium
CVE-2023-44232
WP Hide Pages <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-44988
WP Custom Admin Interface <= 7.32 - Missing Authorization to Transients Deletion
Critical
CVE-2023-5201
OpenHook <= 4.3.0 - Authenticated (Subscriber+) Remote Code Execution via Shortcode
Medium
CVE-2023-44472
Unyson <= 2.7.28 - Missing Authorization
Medium
CVE-2023-44243
Instant CSS <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2023-44479
WP Jump Menu <= 3.6.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-44474
Tiger Forms <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-44241
Keap Landing Pages <= 1.4.2 - Cross-Site Request Forgery
Medium
CVE-2023-4021
Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-44228
Onclick Show Popup <= 8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-44229
Tiny Carousel Horizontal Slider <= 8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-44470
Kv TinyMCE Editor Add Fonts <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2023-44230
Popup contact form <= 7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-44266
WP Adminify <= 3.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2023-44227
Simple File List <= 6.1.9 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2023-44985
BuddyMeet <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.