High
CVE-2023-0467
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2022-40700
CSSTidy - Server-Side Request Forgery
High
CVE-2023-27440
Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-27451
Instant Images <= 5.1.0.1 - Authenticated (Author+) Server-Side Request Forgery via instant_images_download
Medium
CVE-2023-0085
Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass
Medium
CVE-2023-27460
CP Contact Form with Paypal <= 1.3.34 - Authenticated Feedback Submission
High
CVE-2023-23700
OceanWP <= 3.4.1 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2023-25970
Zendrop – Global Dropshipping <= 1.0.0 - Arbitrary File Upload
Medium
CVE-2023-26542
phpinfo() WP <= 4.0 - Cross-Site Request Forgery
High
CVE-2023-0876
WP Meta SEO <= 4.5.2 - Missing Authorization in 'startProcess' to Arbitrary Redirect via 'update_link_redirect' task
Medium
CVE-2023-23872
GMAce <= 1.5.2 - Authenticated(Admin+) Directory Traversal
High
CVE-2023-0340
Custom Content Shortcode <= 4.0.2 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2023-0937
VK All in One Expansion Unit <= 9.87.0.1 - Reflected Cross-Site Scripting via REQUEST_URI
Medium
CVE-2022-3894
WP OAuth Server <= 4.2.3 - Cross-Site Request Forgery to Arbitrary Post Deletion (wo_ajax_remove_client)
Medium
CVE-2022-4148
WP OAuth Server <= 4.2.5 - Authenticated (Subscriber+) Arbitrary Client Deletion (wo_ajax_remove_client)
Critical
CVE-2023-25699
Live Streaming - Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution
Medium
CVE-2023-0156
All-In-One Security (AIOS) <= 5.1.4 - Authenticated(Admin+) Directory Traversal
Critical
CVE-2022-4328
WooCommerce Checkout Field Manager <= 17.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-23800
Shortcodes Ultimate <= 5.12.6 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2023-0477
Auto Featured Image (Auto Post Thumbnail) <= 3.9.15 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2022-45368
1003 Mortgage Application <= 1.75 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2023-0581
PrivateContent <= 8.4.3 - Protection Mechanism Bypass
Medium
CVE-2023-23888
RankMath SEO <= 1.0.107.2 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2022-46839
JS Help Desk <= 2.7.1 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.