High
CVE-2023-2546
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-34384
Kebo Twitter Feed <= 1.5.12 - Cross-Site Request Forgery via kebo_twitter_menu_render
Medium
CVE-2023-34376
Change WooCommerce Add To Cart Button Text <= 1.3 - Missing Authorization via rexvs_settings_submit
Medium
CVE-2023-3126
B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Information Disclosure
Medium
CVE-2023-3125
B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Price Modification
Medium
CVE-2023-34387
Constant Contact Forms <= 1.14.0 - Missing Authorization via constant_contact_optin_ajax_handler
Medium
CVE-2023-34386
WPC Smart Wishlist for WooCommerce <= 4.7.1 - Cross-Site Request Forgery via wishlist_add and wishlist_remove
High
CVE-2023-34379
Cart2Cart: Magento to WooCommerce Migration <= 2.0.0 - Missing Authorization via setToken
Medium
CVE-2023-35046
Dynamic Visibility for Elementor <= 5.0.5 - Missing Authorization to Authenticated(Subscriber+) Post Visibility Modification
Medium
CVE-2023-34378
WP Hide Post <= 2.0.10 - Cross-Site Request Forgery via save_bulk_edit_data
Medium
CVE-2023-32294
GDPR Cookie Consent Notice Box <= 1.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2416
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logout
High
CVE-2023-2781
User Email Verification for WooCommerce <= 3.5.0 - Authentication Bypass
Medium
CVE-2023-34008
WP ERP <= 1.12.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-2404
CRM and Lead Management by vcita <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-3053
Page Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creation
Medium
CVE-2023-34371
SpamReferrerBlock <= 2.22 - Cross-Site Request Forgery
Medium
CVE-2023-34019
Uncanny Toolkit for LearnDash <= 3.6.4.3 - Missing Authorization via review-banner-visibility REST route
Medium
CVE-2023-0584
VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update
Low
b9002f6e-4345-4908-9cb8-9841a2458eb7
CartFlows <= 1.11.11 - Insecure Direct Object Reference to Arbitrary Post Deletion
Medium
CVE-2023-32094
Extended Post Status <= 1.0.19 - Missing Authorization via wp_insert_post_data
Medium
CVE-2023-3052
Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletion
Medium
CVE-2023-34002
WP Inventory Manager <= 2.1.0.13 - Cross-Site Request Forgery via delete_item
Medium
CVE-2023-34012
Premium Addons PRO <= 2.8.24 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.