High
CVE-2023-36385
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-36502
Balkon <= 1.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-3182
Restrict Content <= 3.2.2 - Reflected Cross-Site Scripting
High
CVE-2023-36508
Contact Form to DB by BestWebSoft <= 1.7.1 - Authenticated (Administrator+) SQL Injection via 's'
Medium
CVE-2023-36503
MaxButtons <= 9.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-3132
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
Medium
CVE-2023-3387
Lana Text to Image <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2579
InventoryPress <= 1.7 - Authenticated(Author+) Stored Cross-Site Scripting
Medium
CVE-2023-36504
BBS e-Popup <= 2.4.5 - Missing Authorization
Medium
79bb311d-d10d-4e4e-b690-84c0051b9911
Restrict Content <= 3.2.2 - Missing Authorization to Notice Dismissal
Medium
CVE-2023-2143
Enable SVG, WebP & ICO Upload <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2023-34017
Five Star Restaurant Reservations <= 2.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-3372
Lana Shortcodes <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-3197
MStore API <= 4.0.1 - Unauthenticated SQL Injection
High
CVE-2023-3186
Popup by Supsystic <= 1.10.18 - Prototype Pollution
Medium
041e635a-9f97-4f54-8ecb-57bbbc321cfc
ProfilePress <= 4.10.3 - Reflected Cross-Site Scripting via error message
Medium
CVE-2023-2561
Gallery Metabox <= 1.5 - Missing Authorization via gallery_remove
Medium
CVE-2023-36505
Ninja Forms <= 3.6.24 - Authenticated (Admin+) Arbitrary File Deletion
Medium
CVE-2023-36510
ReDi Restaurant Reservation <= 23.0211 - Missing Authorization
High
CVE-2023-3167
Mail Queue <= 1.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-2517
Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup
High
CVE-2023-2188
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
Medium
CVE-2023-3369
About Me 3000 widget <= 2.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b27338c7-2fbc-4985-a25e-8e2a9fdef8c3
Customer Service Software & Support Ticket System <= 5.12.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.