Medium
CVE-2023-37972
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2023-37966
User Activity Log <= 1.6.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-37890
KB Support <= 1.5.88 - Missing Authorization to Sensitive Data Exposure
Medium
CVE-2022-4888
Multiple Addify Plugins <= (Various Versions) - Cross-Site Request Forgery
High
CVE-2023-3158
Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject
High
CVE-2022-46849
Coming Soon Page <= 1.5.9 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-29095
RSVPMaker <= 10.5.4 - Authenticated (Administrator+) SQL Injection via 'resend'
Medium
CVE-2023-3345
Masteriyo - LMS for WordPress <= 1.6.7 - Sensitive Information Exposure
High
CVE-2023-36677
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-3447
Active Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP Injection
High
CVE-2022-46860
Short URL <= 1.6.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-36517
WP Abstracts <= 2.6.2 - Cross-Site Request Forgery
Medium
CVE-2023-28692
WP Abstracts <= 2.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-36525
WPJobBoard <= 5.9.0 - Unauthenticated SQL Injection
Medium
CVE-2022-36399
Booked < 2.4.4 - Unauthenticated Sensitive Information Exposure
High
CVE-2023-36529
Houzez CRM <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-36523
Email download link <= 3.7 - Unauthenticated Sensitive Information Exposure
High
CVE-2023-2636
AN_GradeBook <= 5.0.1 - Authenticated (Subscriber+) SQL Injection via 'id'
High
CVE-2023-36508
Contact Form to DB by BestWebSoft <= 1.7.1 - Authenticated (Administrator+) SQL Injection via 's'
Medium
CVE-2023-3132
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
Critical
CVE-2023-3197
MStore API <= 4.0.1 - Unauthenticated SQL Injection
High
CVE-2023-2188
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
High
CVE-2023-2229
Quick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id
Medium
CVE-2023-35915
WooCommerce Payments <= 5.9.0 - Authenticated (Shop manager+) SQL Injection via currency parameters
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.