Medium
CVE-2023-2894
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-2893
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product
Medium
CVE-2023-2896
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product
Medium
CVE-2023-2895
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product
Critical
CVE-2023-2278
WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action
Medium
CVE-2023-0489
SlideOnline <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-2492
QueryWall <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-30753
IP Metaboxes <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-45372
Product Gallery Slider for WooCommerce <= 2.2.8 - Cross-Site Request Forgery
Medium
CVE-2023-25443
Button Generator – easily Button Builder <= 2.3.5 - Cross-Site Request Forgery in tools-data-base.php
Medium
CVE-2022-33974
Custom Twitter Feeds (Tweets Widget) <= 1.8.4 - Cross-Site Request Forgery
Medium
CVE-2023-2811
AI ChatBot <= 4.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-30745
IP Metaboxes <= 2.1.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-33925
WooCommerce Product Categories Selection Widget <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-45827
Video Contest WordPress Plugin <= 3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-29174
SKU Label Changer For WooCommerce <= 3.0 - Missing Authorization
Medium
CVE-2022-45823
Video Contest WordPress Plugin <= 3.2 - Cross-Site Request Forgery
Medium
CVE-2023-2684
File Renaming on Upload <= 2.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-34026
This Day In History <= 3.10.1 - Reflected Cross-Site Scripting
Critical
CVE-2023-34027
Recently Viewed Products <= 1.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2023-2899
Google Map Shortcode <= 3.1.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-2761
User Activity Log <= 1.6.2 - Authenticated(Administrator+) SQL Injection via txtsearch
Medium
CVE-2023-2751
Upload Resume <= 1.2.0 - Captcha Bypass via resume_upload_form
Medium
CVE-2023-33212
JetFormBuilder <= 3.0.6 - Cross-Site Request Fogery via 'do_admin_action'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.