Medium
CVE-2023-49186
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2023-49854
Caddy <= 1.9.7 - Cross-Site Request Forgery
Medium
CVE-2023-49853
PayTR Taksit Tablosu <= 1.3.3 - Improper Authorization
Medium
CVE-2023-50369
Alma – Pay in installments or later for WooCommerce <= 5.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-49843
First Order Discount Woocommerce <= 1.21 - Cross-Site Request Forgery
Medium
CVE-2023-49840
Multi Currency For WooCommerce <= 1.5.5 - Cross-Site Request Forgery
Medium
CVE-2023-49817
Flexible Woocommerce Checkout Field Editor <= 2.0.1 - Missing Authorization
Medium
CVE-2023-49834
WOOCS – WooCommerce Currency Switcher <= 1.4.1.4 - Cross-Site Request Forgery via delete_profiles_data
Medium
CVE-2023-49828
WooCommerce Payments <= 6.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-49761
Product Enquiry for WooCommerce <= 3.0 - Cross-Site Request Forgery
Medium
CVE-2023-49759
WooDiscuz – WooCommerce Comments <= 2.3.0 - Cross-Site Request Forgery
Medium
CVE-2023-49767
Biteship <= 2.2.27 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2023-49762
AppMySite <= 3.11.0 - Unauthenticated Information Disclsoure
Medium
CVE-2023-49744
Gift Up 2.21.3 - Cross-Site Request Forgery via consume_post
Medium
95abec2d-a03a-4b07-8890-18568650c41f
Gift Up 2.21.3 - Cross-Site Request Forgery via consume_post
Medium
CVE-2023-49194
Importify <= 1.0.4 - Unauthenticated Sensitive Information Exposure
Medium
1ce1316b-674a-4436-968f-9ffca4e8f726
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Cross-Site Request Forgery
Medium
6954364e-567c-407c-afc6-983b7257cc88
Quotes for WooCommerce <= 2.0.1 - Cross-Site Request Forgery
Medium
CVE-2023-51680
Quotes for WooCommerce <= 2.0.1 - Missing Authorization
Medium
CVE-2023-49181
WP Event Manager <= 3.1.41 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-49185
Doofinder for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via tab
Medium
f59cf3d6-06a0-42ec-a604-5f59c6b2be40
Razorpay for WooCommerce <= 4.5.6 - Missing Authorization
Medium
e6a2b2f6-c648-4755-be24-92c7f287813e
Razorpay for WooCommerce <= 4.5.6 - Cross-Site Request Forgery
Medium
CVE-2023-49153
Add to Cart Text Changer and Customize Button, Add Custom Icon <= 2.0 - Cross-Site Request Forgery via wactc_text_form
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.