High
CVE-2023-0279
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2023-24005
Inline Tweet Sharer <= 2.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2023-24000
GamiPress <= 2.5.7 - Unauthenticated SQL Injection
High
CVE-2023-25045
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via $email value
High
CVE-2023-25047
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via 'delete' parameter
Medium
CVE-2022-47166
Void Contact Form 7 Widget For Elementor Page Builder <= 2.1.1 - Cross-Site Request Forgery in void_cf7_opt_in_user_data_track
High
CVE-2023-0487
My Sticky Elements <= 2.0.8 - Authenticated (Admin+) SQL Injection
High
CVE-2022-44580
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0381
GigPress <= 2.3.28 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-46797
All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 5.2.3 - Cross-Site Request Forgery
Medium
CVE-2022-38456
Ajax Search Lite <= 4.10.3 - Missing Authorization leading to Authenticated (Subscriber+) Sensitive Information Disclosure
Medium
CVE-2022-45350
Simple History <= 3.3.1 - Authenticated (Subscriber+) CSV Injection
High
CVE-2023-0278
GeoDirectory <= 2.2.23 - Authenticated (Admin+) SQL Injection
High
CVE-2022-38074
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection
High
CVE-2022-47151
JS Help Desk <= 2.7.1 - Unauthenticated SQL Injection
Critical
CVE-2022-47588
Simple Photo Gallery <= 1.8.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-1016
Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection
High
4f3f0ef8-8a13-4110-a402-e1bcf493560a
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.12.23 - Unauthenticated SQL Injection
High
CVE-2023-0263
WP Yelp Review Slider <= 7.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0220
Pinpoint Booking System <= 2.9.9.2.8 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0260
WP Review Slider <= 12.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0259
WP Google Review Slider <= 11.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0261
WP TripAdvisor Review Slider <= 10.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0262
WP Airbnb Review Slider <= 3.2 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.