Critical
CVE-2023-2221
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Low
CVE-2023-23822
UTM Tracker <= 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-33927
Multiple Page Generator Plugin – MPG <= 3.3.19 - Authenticated (Administrator+) SQL Injection in projects_list and total_projects
High
CVE-2023-33924
SIS Handball <= 1.0.45 - Authenticated (Administrator+) SQL Injection via 'orderby'
Critical
CVE-2023-33930
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Zip Extraction to Arbitrary File Upload in File Manager
Medium
e743e656-2dd9-43ed-a190-b03af7c75c54
Abandoned Cart Lite for WooCommerce <= 5.14.1 - Cross-Site Request Forgery via ts_reset_tracking_setting
High
CVE-2023-2719
SupportCandy <= 3.1.6 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-2805
SupportCandy <= 3.1.6 - Authenticated (Admin+) SQL Injection
High
CVE-2023-31212
Contact Form Entries <= 1.3.0 - Authenticated (Contributor+) SQL Injection via shortcode
High
CVE-2023-28777
LearnDash LMS <= 4.5.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-33321
EventPrime <= 2.8.6 - Sensitive Information Exposure
High
CVE-2023-2527
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.2.3 - Authenticated (Admin+) SQL Injection
High
CVE-2023-33209
SEO Change Monitor <= 1.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-2607
Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-32743
AutomateWoo <= 5.7.1 - Authenticated (Shop manager+) SQL Injection
High
CVE-2023-2484
Active Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-45373
Slimstat Analytics <= 5.0.4 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-54346
Backup Migration <= 1.2.8 - Sensitive Information Exposure
Medium
CVE-2022-45354
Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API
High
CVE-2023-2237
WP Replicate Post <= 4.0.2 - Authenticated (Contributor+) SQL Injection
High
CVE-2023-0900
AP Pricing Tables Lite <= 1.1.6 - Authenticated (Admin+) SQL Injection
High
CVE-2023-32508
Order Your Posts Manually <= 2.2.5 - Authenticated (Administrator+) SQL Injection via 'sortdata'
Critical
CVE-2022-47586
Ultimate Addons for Contact Form 7 <= 3.1.23 - Unauthenticated SQL Injection via form_id
High
CVE-2023-32121
Zero Spam <= 5.4.4 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.