High
CVE-2023-6219
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2023-6090
Mollie Payments for WooCommerce <= 7.3.11 - Authenticated (Shop Manager+) Arbitrary File Upload
Medium
CVE-2023-46641
12 Step Meeting List <= 3.14.24 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2023-6295
SiteOrigin Widgets Bundle < 1.51.0 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2023-4311
Vrm 360 3D Model Viewer <= 1.2.1 - Authenticated (Contributor+) Arbitrary File Upload
Critical
CVE-2023-6585
WP JobSearch <= 2.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-4724
Export any WordPress data to XML/CSV < 1.4.1 & WP ALL Export Pro < 1.8.6 - Authenticated (Admin+) Remote Code Execution
High
CVE-2023-5504
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
Medium
CVE-2023-48275
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2023-6222
Quttera Web Malware Scanner <= 3.4.1.48 - Authenticated (Administrator+) Directory Traversal via ShowFile
High
CVE-2023-47846
WP Githuber MD <= 1.16.2 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2023-6091
Theme Editor <= 2.7.1 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-47843
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Deletion
Low
CVE-2023-5907
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal
Critical
CVE-2023-47873
WP Child Theme Generator <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2023-47842
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Upload
High
CVE-2023-6187
Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2023-38399
Phlox Portfolio <= 2.3.1 - Unauthenticated Local File Inclusion
Critical
CVE-2023-39163
Phlox Shop <= 2.0.0 - Unauthenticated Local File Inclusion
Critical
CVE-2023-37888
Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion
High
CVE-2023-5953
Welcart e-Commerce <= 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2023-47784
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2023-6133
Forminator <= 1.27.0 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2023-5762
Filr – Secure document library <= 1.2.3.5 - Authenticated (Author+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.