Medium
852b1895-3bed-4c2f-912c-c136b38a09bb
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2023-6875
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API
Medium
CVE-2024-0235
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via get_virtual_users
Medium
CVE-2024-0236
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.7 (Free) - Missing Authorization via config_virtual_event
Medium
CVE-2024-22137
Constant Contact Forms by MailMunch <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-22139
WordPress Manutenção <= 1.0.6 - IP Spoofing to Maintenance Mode Bypass
Medium
5c24ee66-7b57-4e4c-bbb5-0451fc24ce4b
Newsletter <= 8.0.6 - Cross-Site Request Forgery
Medium
CVE-2023-7070
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-51409
AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload
Medium
CVE-2023-6158
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta
Medium
CVE-2023-6582
ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-22134
Contact Form 7 Extension For Mailchimp <= 0.5.70 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2023-52223
MailerLite – WooCommerce integration <= 2.0.8 - Cross-Site Request Forgery via Multiple AJAX Functions
Medium
CVE-2023-52227
MailerLite – WooCommerce integration <= 2.0.8 - Missing Authorization via Multiple Functions
Medium
CVE-2023-52224
Revolut Gateway for WooCommerce <= 4.9.7 - Missing Authorization
Medium
CVE-2023-6788
Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery
Medium
1b9ed184-814d-46cb-979c-908bc9359fae
Swift SMTP <= 5.0.6 - Cross-Site Request Forgery
Medium
CVE-2023-6938
Oxygen Builder <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
High
CVE-2023-6751
Hostinger <= 1.9.7 - Missing Authorization to Maintenance Mode Activation
Critical
CVE-2023-52225
Taggbox <= 3.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-7019
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder <= 2.6.8 - Missing Authorization
High
CVE-2024-21743
Houzez Login Register <= 3.2.5 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Critical
CVE-2023-52218
WooCommerce Tranzila Gateway <= 1.0.8 - Unauthenticated PHP Object Injection
High
CVE-2023-52219
Gecka Terms Thumbnails <= 1.1 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.