Critical
CVE-2023-5105
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2023-47762
BetterDocs <= 2.5.2 - Missing Authorization via AJAX actions
High
CVE-2023-47679
Qi Addons For Elementor <= 1.6.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2023-32095
Rename Media Files <= 1.0.1 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2023-5974
WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
Critical
CVE-2023-4922
WPB Show Core <= 2.2 - Unauthenticated Local File Inlclusion
Low
CVE-2023-6160
LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
High
CVE-2023-5822
Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload
High
CVE-2023-5860
Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload
Critical
CVE-2023-47178
The Plus Addons for Elementor Pro <= 5.2.8 - Unauthenticated Local File Inclusion
High
CVE-2023-5099
HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2023-4252
EventPrime <= 3.3.2 - Improper Server-Side Checks to Booking Payment Bypass
Critical
CVE-2023-5843
Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution
High
CVE-2023-5250
Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
Critical
CVE-2023-5199
PHP to Page <= 0.3 - Authenticated (Subscriber+) Local File Inclusion to Remote Code Execution via Shortcode
Medium
CVE-2023-5314
WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending
High
CVE-2023-46784
ICS Calendar <= 10.12.0.2 - Authenticated (Contributor+) Arbitrary File Read and Server-Side Request Forgery
High
CVE-2023-46205
Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated(Contributor+) Local File Inclusion
High
CVE-2023-46207
Motors – Car Dealer & Classified Ads <= 1.4.6 - Server Side Request Forgery
High
CVE-2023-46149
Themify Ultra <= 7.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2023-5601
WooCommerce Ninja Forms Product Add-ons <= 1.7.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2011-10004
Recip.ly <= 1.1.7 - Unauthenticated Arbitrary File Upload in uploadImage.php
Medium
CVE-2023-45652
Remote Content Shortcode <= 1.5 - Authenticated(Contributor+) Local File Inclusion via shortcode
High
CVE-2023-45751
Nexter Extension <= 2.0.3 - Authenticated(Editor+) Remote Code Execution via metabox
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.