Medium
CVE-2023-4795
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-41243
WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress'
Medium
CVE-2023-4811
Wordpress File Upload <= 4.23.2 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4620
Booking Calendar <= 9.7.3 - Unauthenticated Stored Cross-Site Scripting
Medium
f1efcff5-3af6-4c44-9654-b917523419aa
WooCommerce <= 7.0.0 - Authenticated(Shop Manager+) Sensitive Information Exposure
High
CVE-2023-4827
File Manager Pro – Filester - <= 1.7.6 - Cross-Site Request Forgery to Arbitrary File Rename
Medium
CVE-2023-4887
Google Maps Plugin by Intergeo <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4840
MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-5203
WP Sessions Time Monitoring Full Automatic <= 1.0.8 - Unauthenticated SQL injection
Medium
CVE-2023-4890
JQuery Accordion Menu Widget <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
ad430706-749f-4582-af07-6c543b8d5aad
Checkout Field Editor <= 1.7.4 - Cross-Site Request Forgery to Checkout Fields Update
Medium
a4647210-ba7e-4233-83d6-12572213f5fb
Checkout Field Editor (Premium) < 1.7.5 - Cross-Site Request Forgery
Medium
CVE-2023-7320
WooCommerce <= 7.8.2 - Sensitive Information Exposure
High
CVE-2023-3392
Read More & Accordion <= 3.2.6.1 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-4893
Crayon Syntax Highlighter <= 2.8.4 - Authenticated (Contributor+) Server Side Request Forgery
Medium
CVE-2023-4826
SocialDriver < 2024 - Prototype Pollution
Medium
08a98c08-cddc-4bc3-bc07-15d084070abd
WooCommerce Subscription < 4.6.0 - Cross-Site Request Forgery
High
CVE-2023-4598
Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
Low
f029bd86-d979-45d1-97fe-75c43fb71148
Modula <= 2.7.4 - Incomplete Authorization via 'save_image' and 'save_images'
Medium
CVE-2023-46313
Zotpress <= 7.3.4 - Reflected Cross-Site Scripting via 'PHP_SELF'
Medium
CVE-2023-41953
ProfilePress <= 4.13.1 Cross-Site Request Forgery via 'admin_notice'
High
CVE-2023-41954
ProfilePress <= 4.13.1 - Limited Privilege Escalation via 'acceptable_defined_roles'
Medium
4ad16964-3d0a-4769-a167-5ec62486bfe9
Educare <= 1.4.6 - Missing Authorization to Sensitive Information Exposure
Medium
e4dc8f18-d990-4e41-8bf8-dfa9de4c0f6e
WP Crowdfunding <= 2.1.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.