Medium
CVE-2023-3671
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-36528
kk Star Ratings <= 5.4.3 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2023-3708
Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2023-3575
Quiz And Survey Master <= 8.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Question Title
Medium
CVE-2023-3524
WPCode <= 2.0.13 - Unauthenticated Reflected Cross-Site Scripting via Tag Filter Links
High
CVE-2023-3492
WP Shopping Pages <= 1.14 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-37985
Restaurant Menu and Food Ordering by Five Star Plugins <= 2.4.6 - Cross-Site Request Forgery via maybe_duplicate_item
Medium
CVE-2023-31221
PDQ CSV <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-36686
CartFlows Pro <= 1.11.11 - Reflected Cross-Site Scripting
Critical
CVE-2015-10122
WP Donate <= 1.4 - Unauthenticated SQL Injection in donate-display.php
Medium
CVE-2023-3996
ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b139260b-7741-4e35-b23f-896f23719739
Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in template_importer
Medium
CVE-2023-36676
Spectra <= 2.6.6 - Missing Authorization
High
8483196e-f476-41e5-a988-bcd8a9952a64
User Activity Log <= 1.6.2 - Unauthenticated SQL Injection via username
High
CVE-2023-36679
Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in import_wpforms
High
CVE-2023-3459
Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Change
Medium
CVE-2023-2830
WP Testimonials <= 1.4.2 - Cross-Site Request Forgery to Widget Deletion
Medium
CVE-2023-2082
Buy Me a Coffee – Button and Widget Plugin <= 3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-37980
Custom Field For WP Job Manager <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-37982
Integration for Contact Form 7 and Salesforce <= 1.3.3 - Open Redirect
Medium
CVE-2023-36507
BookingPress <= 1.0.64 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-37978
HTTP Headers <= 1.18.11 - Server-Side Request Forgery
Medium
CVE-2023-37977
WPFunnels <= 2.7.16 - Reflected Cross-Site Scripting
Medium
CVE-2023-25984
Dovetail <= 1.2.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.