Medium
CVE-2023-6557
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2024-22147
PDF Invoices & Packing Slips for WooCommerce <= 3.7.6 - Authenticated (Shop Manager+) SQL Injection
Medium
852b1895-3bed-4c2f-912c-c136b38a09bb
Paid Memberships Pro <= 2.12.6 - Information Exposure in Debug Logs
High
CVE-2024-25924
WP Testimonials <= 1.4.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-22141
Profile Builder Pro <= 3.10.0 - Authenticated (Subscriber+) Time-Based One-Time Password Sensitive Information Exposure
Critical
CVE-2023-52215
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated SQL Injection via userToken
Medium
CVE-2024-22138
Seraphinite Accelerator <= 2.20.47 - Unauthenticated Sensitive Information Exposure via Log File
High
CVE-2024-30501
Download Monitor <= 4.9.4 - Authenticated (Admin+) SQL Injection
High
CVE-2024-21747
WP ERP <= 1.12.8 - Authenticated (Accounting manager+) SQL Injection
High
CVE-2023-52201
pTypeConverter <= 0.2.8.1 - Authenticated (Editor+) SQL Injection
Medium
CVE-2023-52217
WooCommerce Conversion Tracking <= 2.0.11 - Missing Authorization
High
CVE-2023-52204
Randomize <= 1.4.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-52190
Coupon Referral Program <= 1.8.4 - Sensitive Information Disclosure
Medium
CVE-2023-6733
WP-Members Membership Plugin <= 3.4.8 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-52208
Constant Contact Forms <= 2.4.2 - Information Disclosure via Log Files
Medium
CVE-2023-6981
WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Critical
CVE-2023-6567
LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by
Medium
CVE-2023-52187
Image Source Control <= 2.17.0 - Sensitive Information Exposure via Log File
High
CVE-2023-52185
Everest Backup <= 2.1.9 - Sensitive Information Exposure via Log File
High
CVE-2023-52180
Recipe Maker For Your Food Blog from Zip Recipes <= 8.1.0 - Authenticated(Contributor+) SQL Injection
High
CVE-2023-52133
Most And Least Read Posts Widget <=2.5.16 - Authenticated(Contributor+) SQL Injection via Widget settings
High
CVE-2023-52142
Events Shortcodes & Templates For The Events Calendar <= 2.3.1 - Authenticated (Contributor+) SQL Injection via shortcode
Medium
CVE-2023-52148
Affiliates Manager <= 2.9.30 - Sensitive Information Exposure via Log File
Medium
CVE-2023-52135
WS Form LITE <= 1.9.170 - Authenticated(Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.