Low
CVE-2023-4216
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2023-35881
WooCommerce One Page Checkout <= 2.3.0 - Authenticated (Contributor+) Local File Inclusion via `woocommerce_one_page_checkout`
High
CVE-2023-39312
Avada <= 7.11.1 - Authenticated(Author+) Arbitrary File Upload via Zip Extraction
High
CVE-2023-39307
Avada <= 7.11.1 - Authenticated(Contributor+) Arbitrary File Upload via 'ajax_import_options'
High
CVE-2023-39313
Avada <= 7.11.1 - Authenticated(Contributor+) Server Side Request Forgery via 'ajax_import_options'
Critical
CVE-2023-3452
Canto <= 3.0.4 - Unauthenticated Remote File Inclusion
Critical
a4562535-ef69-4337-b03e-0b7c869cb042
Kadence Blocks <= 3.1.10 - Unauthenticated Arbitrary File Upload
High
CVE-2023-28170
Theme Demo Import <= 1.1.3 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2023-4142
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution
High
CVE-2023-4141
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution
High
CVE-2023-39157
JetElements <= 2.6.10 - Authenticated (Contributor+) Remote Code Execution
Critical
CVE-2023-29384
WordPress Job Board and Recruitment Plugin – JobWP <= 2.0 - Arbitrary File Upload via 'jobwp_upload_resume'
Medium
CVE-2023-5798
Assistant <= 1.4.3 - Authenticated (Editor+) Server Side Request Forgery
Medium
CVE-2023-38515
Church Admin <= 3.7.56 - Server-Side Request Forgery via church_admin_import_csv
Critical
CVE-2023-32297
LWS Affiliation <= 2.2.6 - Unauthenticated Remote/Local File Inclusion
High
CVE-2023-3813
Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
b139260b-7741-4e35-b23f-896f23719739
Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in template_importer
High
CVE-2023-36679
Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in import_wpforms
Medium
CVE-2023-37978
HTTP Headers <= 1.18.11 - Server-Side Request Forgery
Critical
CVE-2023-3342
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2023-23684
WPGraphQL <= 1.14.5 - Authenticated (Editor+) Server-Side Request Forgery
Medium
CVE-2023-34013
Poll Maker <= 4.6.2 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2023-36505
Ninja Forms <= 3.6.24 - Authenticated (Admin+) Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.