Medium
CVE-2023-28789
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-28781
WordPress Contact Forms by Cimatti <= 1.5.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-28750
Albo Pretorio Online <= 4.6 - Reflected Cross-Site Scripting via 'Errore'
High
CVE-2023-1381
WP Meta SEO <= 4.5.4 - Authenticated (Author+) PHAR Deserialization
Medium
CVE-2023-0764
Gallery by BestWebSoft <= 4.6.9 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2023-28788
Advanced Page Visit Counter <= 6.4.2 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2022-46808
ARMember <= 3.4.11 - Unauthenticated SQL Injection
Medium
CVE-2023-28784
Contest Gallery <= 21.1.2 - Reflected Cross-Site Scripting
High
CVE-2023-0277
WC Fields Factory <= 4.1.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-28776
Continuous Image Carousel With Lightbox <= 1.0.15 - Reflected Cross-Site Scripting via search_term, order_by and order_pos
Medium
CVE-2023-1325
Easy Forms for MailChimp <= 6.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-28774
Review Stream <= 1.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1554
Quick Paypal Payments <= 5.7.26.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28792
Continuous Image Carousel With Lightbox <= 1.0.15 - Reflected Cross-Site Scripting via search_term, order_by and order_pos
Medium
CVE-2023-28786
iThemes Security <= 8.1.4 - Open Redirection via redirect_to_https
Medium
18f04566-3a63-41f3-aa9b-766304d56499
TH Side Cart and Menu Cart for Woocommerce <= 1.1.1 - Cross-Site Request Forgery
Medium
d09a0b62-6556-4be5-a6f2-0cb0edcced3b
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_store_payment_note
Medium
a4572874-afd4-4e46-8a28-76a0a6cc8acb
Pagination by BestWebSoft < 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
a2dc1a04-5503-412b-92e7-ed86910abd92
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_delete_payment_note
Medium
5ea02dd5-d837-471c-aa6a-264ffcedd55d
GiveWP <= 2.25.2 - Cross-Site Request Forgery
Critical
CVE-2023-28121
WooCommerce Payments 4.8.0 - 5.6.1 Authentication Bypass and Privilege Escalation
Medium
3adf6b20-110f-4057-9fab-5248e9c18555
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28665
Bulk Price Update for Woocommerce <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-46812
Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.0.13 - Cross-Site Request Forgery via send_email
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.