Medium
CVE-2023-41664
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-41648
Login and Logout Redirect <= 2.0.2 - Open Redirect
High
CVE-2023-41665
Give - Donation Plugin <= 2.33.0 - Authenticated(Give Manager+) Privilege Escalation
Critical
CVE-2023-4490
WP Job Portal <= 2.0.5 - Unauthenticated SQL Injection
Medium
9945c85b-a97a-4ad0-9d0a-69faf157563a
Simple 301 Redirects <= 2.0.7 - Cross-Site Request Forgery via 'clicked'
Medium
CVE-2023-40004
Multiple ServMask Plugins <= (Various Versions) - Missing Authorization to Access Token Update
Medium
CVE-2023-0689
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode
Medium
CVE-2023-4600
AffiliateWP <= 2.14.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
Medium
CVE-2023-4599
Email Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4390
Popup Box <= 3.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41236
Happy Elementor Addons Pro <= 2.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-4148
Ditty <= 3.1.24 - Reflected Cross-Site Scripting
Medium
CVE-2023-41242
Snap Pixel <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40333
Bridge Core <= 3.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-41235
Everest News Pro <= 1.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-41244
Localize Remote Images <= 1.0.9 - Cross-Site Request Forgery via admin menu
Critical
CVE-2023-4596
Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-41241
SureCart <= 2.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-41238
Social Media & Share Icons <= 2.8.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-41237
Arya Multipurpose Pro <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-49832
Site Reviews <= 6.10.2 - Missing Authorization
Medium
CVE-2023-41240
Pricing Deals for WooCommerce <= 2.0.3.2 - Missing Authorization via vtprd_ajax_clone_rule
Medium
CVE-2023-41239
PowerPress <= 11.0.6 - Authenticated (Contributor+) Server-Side Request Forgery via wp_ajax_powerpress_media_info
Medium
CVE-2023-30471
WP Search Analytics <= 1.4.7 - Reflected Cross-Site Scripting via 'render_stats_page'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.