Critical
CVE-2018-25095
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2023-6827
Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2023-6826
E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2023-6636
Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2023-6558
Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload
Medium
CVE-2023-5877
affiliate-toolkit <= 3.4.2 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2023-6553
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
Medium
CVE-2023-6583
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality
Medium
CVE-2023-6120
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal
High
CVE-2023-48777
Elementor <= 3.18.1 - Authenticated(Contributor+) Arbitrary File Upload to Remote Code Execution via Template Import
Medium
CVE-2023-49282
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
High
CVE-2023-49830
Astra Pro <= 4.3.1 - Authenticated(Contributor+) Remote Code Execution via Metabox
High
CVE-2023-49814
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
Critical
CVE-2023-49815
WappPress <= 5.0.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2023-49753
Adifier System < 3.1.4 - Unauthenticated Local File Inclusion
Critical
CVE-2023-6316
MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload
High
CVE-2023-6220
Piotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-49746
SpeedyCache <= 1.1.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2023-6449
Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload
High
CVE-2023-5931
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.15 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2023-5939
rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-49176
WP Pocket URLs <= 1.0.2 - Reflected Cross-Site Scripting
High
CVE-2023-49159
CommentLuv <= 3.0.4 - Server Side Request Forgery via do_click
Medium
CVE-2023-5672
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.