Medium
f670b93e-da2e-43e7-a28a-6cacba4df3a1
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-1623
Custom Post Type UI <= 1.13.4 - Cross-Site Request Forgery to Sensitive Information Exposure
Medium
CVE-2023-24392
Full Width Banner Slider Wp <= 1.1.7 - Reflected Cross-Site Scripting via search_term
Medium
CVE-2022-41635
Advanced Shipment Tracking for WooCommerce <= 3.5.2 - Cross-Site Request Forgery via paginate_shipping_provider_list and filter_shipping_provider_list
High
CVE-2022-46850
Easy Media Replace <= 0.1.3 - Authenticated (Author+) Arbitrary File Deletion
Medium
CVE-2022-46864
Woocommerce Custom Checkout Fields Editor With Drag & Drop <= 0.1 - Reflected Cross-Site Scripting via 'tab'
Medium
CVE-2022-46858
Product Specifications for Woocommerce <= 0.6.0 - Reflected Cross-Site Scripting via Arbitrary Query String Parameter
Medium
CVE-2023-0418
Video Central for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0424
MS-Reviews <= 1.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
5c51f55f-6e8c-467c-999b-4e6a1a6f7bbc
WC Fields Factory <= 4.1.5 - Authenticated(Subscriber+) SQL Injection
High
CVE-2023-3124
Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option
Medium
CVE-2023-23993
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-0420
Custom Post Type and Taxonomy GUI Manager <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-38077
WP OnlineSupport, Essential Plugin Popup Anything <= 2.2.1 - Cross Site Request Forgery
Medium
CVE-2023-0589
WP Image Carousel WordPress - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
07c0b4c5-d76e-4bdc-87d1-3144a1466c77
SupportCandy <= 3.1.3 - Sensitive Data Exposure
Medium
CVE-2022-40702
Advanced Local Pickup for WooCommerce <= 1.5.2 - Missing Authorization
Medium
0472804e-00cc-4c4c-97aa-86f433f65782
Maps Widget for Google Maps <= 4.23 - Cross-Site Request Forgery via dismiss_notice
Medium
CVE-2023-28778
Pagination by BestWebSoft <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27922
Newsletter <= 7.6.8 - Reflected Cross-Site Scripting
High
CVE-2023-0889
Themeflection Numbers <= 1.8.1 - Authenticated(Subscriber+) Privilege Escalation via tf_numb_save_licenses
Medium
CVE-2023-25966
Filebird <= 5.1.4 - Missing Authorization via resAdminPermissionsCheck
High
CVE-2023-0765
Gallery by BestWebSoft <= 4.6.9 - Authenticated (Author+) SQL Injection
High
CVE-2022-47444
ProfilePress <= 4.5.3 - Unauthenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.