Critical
CVE-2023-3077
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Critical
CVE-2022-47614
MStore API <= 3.9.7 - Unauthenticated SQL Injection
Medium
CVE-2023-2493
All In One Redirection <= 2.1.0 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-35879
WooCommerce Product Vendors <= 2.1.78 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2023-2655
Contact Form Maker <= 1.13.23 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-3093
YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Email
High
CVE-2023-3023
WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'
High
CVE-2023-1615
Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated(Subscriber+) SQL Injection
High
CVE-2023-2601
WP Brutal AI < 2.0.0 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2023-2592
FormCraft Premium <= 3.9.6 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-2482
Responsive CSS EDITOR <= 1.0 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-2623
KiviCare – Clinic & Patient Management System (EHR) <= 3.2.0 - Sensitive Information Exposure
High
CVE-2023-2744
WP ERP <= 1.12.3 - Authenticated (Administrator+) SQL Injection via 'type'
High
CVE-2023-2201
Web Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id
High
CVE-2023-34179
Groundhogg <= 2.7.11 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2023-25700
Tutor LMS <= 2.1.10 - Unauthenticated SQL Injection
High
CVE-2023-34168
WP Report Post <= 2.1.2 - Authenticated (Editor+) SQL Injection
High
CVE-2023-25990
Tutor LMS <= 2.1.10 - Authenticated (Tutor Instructor+) SQL Injection
High
CVE-2023-25800
Tutor LMS <= 2.2.0 - Authenticated (Student+) SQL Injection
High
CVE-2014-125101
Portfolio Gallery – Photo Gallery <= 1.1.8 - Authenticated (Admin+) SQL Injection
High
CVE-2023-2492
QueryWall <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-2761
User Activity Log <= 1.6.2 - Authenticated(Administrator+) SQL Injection via txtsearch
High
CVE-2023-33331
WooCommerce Product Vendors <= 2.1.76 - Authenticated (Vendor admin+) SQL Injection
High
CVE-2023-33330
WooCommerce Follow-Up Emails <= 4.9.50 - Authenticated (Follow-up emails manager+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.