High
CVE-2023-37967
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-37974
WP-FB-AutoConnect <= 4.6.1 - Cross-Site Request Forgery via jfb_admin_page
High
CVE-2023-3136
MailArchiver <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
High
CVE-2023-37976
Radio Forge Muses Player with Skins <= 2.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-37968
Falang multilanguage <= 1.3.39 - Cross-Site Request Forgery via add_language
Medium
CVE-2023-37894
Variation Images Gallery for WooCommerce <= 2.3.3 - Reflected Cross-Site Scripting via style
High
CVE-2023-24410
FluentForm <= 4.3.25 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-37970
MF Gig Calendar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via event_title and event_time
Medium
CVE-2023-37972
WooCommerce Product Stock Alert <= 2.0.1 - Information Disclosure
Medium
CVE-2023-37893
Coming Soon Chop Chop <= 2.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-37973
Replace Word <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-37975
Variation Swatches for WooCommerce <= 2.3.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-34381
Zippy <= 1.6.2 - Missing Authorization via adminInit
High
CVE-2023-32117
Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints
High
CVE-2023-37966
User Activity Log <= 1.6.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-34010
Media Library Assistant <= 3.07 - Reflected Cross-Site Scripting
Medium
55bb3620-c182-46c4-bc22-8526cf410cdb
KB Support <= 1.5.88 - Missing Authorization to Authenticated (Subscriber+) User Data Retrieval
Medium
CVE-2023-37983
Art Direction <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-37969
Checkout with Zelle on Woocommerce <= 3.1 - Missing Authorization
Medium
CVE-2023-3620
WP tarteaucitron.js Self Hosted <= 1.2.4 - Running a Vulnerable Dependency
High
CVE-2023-37885
RealHomes <= 4.3.7 - Missing Authorization
Medium
CVE-2023-37886
RealHomes <= 4.3.7 - Missing Authorization
Medium
CVE-2023-37891
Exit Popups & Onsite Retargeting by OptiMonk <= 2.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-37890
KB Support <= 1.5.88 - Missing Authorization to Sensitive Data Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.