High
CVE-2023-32110
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2023-1938
WP Fastest Cache <= 1.1.4 - Authenticated(Administrator+) Blind Server Side Request Forgery via check_url
Low
CVE-2023-2117
Image Optimizer by 10web <= 1.0.26 - Authenticated(Administator+) Directory Traversal
Medium
288853b8-7523-472e-8406-257ffb3bd5ea
WP-FormAssembly <= 2.0.8 - Limited Server Side Request Forgery via 'formassembly' shortcode
High
CVE-2023-2287
Orbit Fox by ThemeIsle <= 2.10.23 - Authenticated (Author+) Server-Side Request Forgery via URL
Medium
CVE-2023-1977
Booking Manager <= 2.0.28 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2022-4774
Bit Form <= 1.8.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Medium
0b4a0dff-1054-4f50-8ff5-e3cc2b45d77b
Image Optimizer by 10web <= 1.0.25 - Directory Traversal to Information Exposure
High
CVE-2022-45374
YARPP <= 5.30.4 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2023-29197
guzzlehttp/psr7 < 1.9.1 & 2.4.5 - Interpretation Conflict
High
CVE-2023-24379
Landing Page Builder – Free Landing Page Templates <= 3.1.9.8 - Local File Inclusion via 'lpp_template_select'
High
CVE-2023-0924
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2023-1509
GMAce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary File Modification (Creation/Overwrite/Deletion)
Medium
CVE-2023-1623
Custom Post Type UI <= 1.13.4 - Cross-Site Request Forgery to Sensitive Information Exposure
High
CVE-2022-46850
Easy Media Replace <= 0.1.3 - Authenticated (Author+) Arbitrary File Deletion
Medium
CVE-2023-27922
Newsletter <= 7.6.8 - Reflected Cross-Site Scripting
High
CVE-2023-1274
Pricing Tables For WPBakery Page Builder (formerly Visual Composer) <= 2.0 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
Medium
CVE-2023-1427
Photo Gallery by 10Web <= 1.8.14 - Authenticated (Administrator+) Directory Traversal
Medium
CVE-2023-1478
Hummingbird <= 3.4.1 - Unauthenticated Path Traversal
High
CVE-2023-1406
Crocoblock JetEngine <= 3.1.3 - Authenticated(Author+) Arbitrary File Upload to Remote Code Execution
High
CVE-2023-1124
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url
Medium
CVE-2022-45835
PhonePe Payment Solutions <= 1.0.15 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2022-40312
GiveWP <= 2.25.1 - Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler
Medium
CVE-2023-1112
Drag and Drop Multiple File Upload PRO <= 2.10.9 - Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.