Medium
5c7edfad-b45b-4297-876d-a063e02af0bf
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-46851
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 3.1.20 - Cross-Site Request Forgery in add_to_favorite
Medium
CVE-2023-23820
ProfilePress <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23785
Exquisite PayPal Donation <= v2.0.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4652
Video Background <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23816
Sitemap Index <= 1.2.3 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23887
Easy Google Analytics for WordPress <= 1.6.0 - Cross-Site Request Forgery
Medium
37b5fcfd-654b-4151-9494-551799464c7c
Contextual Related Posts <= 3.3.1 - Missing Authorization in crp_ajax_clearcache
High
CVE-2023-26326
BuddyForms <= 2.7.7 - PHAR Deserialization
Critical
CVE-2023-25699
Live Streaming - Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution
Medium
CVE-2022-47422
Accept Stripe Donation – AidWP <= 3.1.5 - Cross Site Request Forgery
Medium
CVE-2023-23806
WordPress Custom Settings <= 1.0 - Authenticated(Admin+) Stored Cross-Site Scripting
High
CVE-2023-25986
PayGreen – Ancienne version <= 4.10.2 - Cross-Site Request Forgery
Medium
CVE-2022-38063
Social Login WP <= 5.0.0.0 - Cross-Site Request Forgery
Medium
CVE-2023-25993
Top 10 – Popular posts plugin for WordPress <= 3.2.3 - Missing Authorization on tptn_ajax_clearcache
Low
CVE-2023-23814
CP Multi View Event Calendar <= 1.4.13 - Insufficient Authorization
Medium
CVE-2023-25991
RegistrationMagic <= 5.1.9.2 - Cross-Site Request Forgery leading to Form Metadata Deletion
Medium
f0c7324f-4c22-44e0-8d2a-9b95fd89467d
vSlider Multi Image Slider <= 4.1.2 - Missing Authorization
High
CVE-2023-0895
WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-23817
Simple PDF Viewer <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via googlepdf Shortcode
Medium
CVE-2023-23717
Portfolio Slideshow <= 1.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23827
Google Maps v3 Shortcode <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-40203
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Missing Authorization in ajaxCalculateSeveralProducts function
High
CVE-2023-0279
Media Library Assistant <= 3.05 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.