Medium
CVE-2023-32103
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-32108
Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-32101
Library Viewer <= 2.0.6 - Open Redirect via 'redirect_to'
Medium
CVE-2023-31235
Participants Database <= 2.4.9 - Cross-Site Request Forgery via _process_general
Medium
a52015fe-c4df-46a6-8f23-b33730797f4c
Participants Database <= 2.4.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
a39ca182-981b-4636-acd5-4c8a269858dd
WOLF <= 1.0.6 - Cross-Site Request Forgery via wpbe_update_page_field
Medium
CVE-2023-30499
FV Flowplayer Video Player <= 7.5.32.7212 - Reflected Cross-Site Scripting via id
Medium
CVE-2023-32102
Library Viewer <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4676
OSM - OpenStreetMap <= 6.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via 'osm_map' Shortcode
Medium
CVE-2023-32122
Spiffy Calendar <= 4.9.3 - Reflected Cross-Site Scripting via page parameter
Medium
CVE-2023-2490
UserAgent-Spy <= 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Critical
CVE-2023-2276
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change
Medium
CVE-2023-31218
WOLF <= 1.0.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpbe_update_page_field
Medium
CVE-2023-32105
WPPizza <= 3.17.1 - Reflected Cross-Site Scripting
High
CVE-2023-2288
Otter - Gutenberg Blocks <= 2.2.5 - Authenticated (Author+) PHAR Deserialization
Medium
CVE-2023-1938
WP Fastest Cache <= 1.1.4 - Authenticated(Administrator+) Blind Server Side Request Forgery via check_url
Medium
CVE-2023-2280
WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action
Low
CVE-2023-2117
Image Optimizer by 10web <= 1.0.26 - Authenticated(Administator+) Directory Traversal
Medium
CVE-2023-1839
PPOM for WooCommerce <= 32.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Critical
CVE-2023-30869
Easy Digital Downloads 3.1 - 3.1.1.4.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
Medium
CVE-2023-2223
Login rebuilder <= 2.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32106
WP Docs <= 1.9.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-2023
Custom 404 Pro <= 3.7.2 - Reflected Cross-Site Scripting via 's'
High
CVE-2023-0443
AnyWhere Elementor <= 1.2.7 - Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.