Critical
CVE-2023-51700
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-51401
Ultimate Addons for Beaver Builder <= 1.35.13 - Authenticated(Contributor+) Directory Traversal to Arbitrary File Download
Medium
CVE-2023-50897
Media File Renamer <= 5.7.7 - Authenticated(Administrator+) Remote Code Execution
Medium
CVE-2023-6290
SEOPress – On-site SEO <= 7.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2023-6049
Estatik Real Estate Plugin <= 4.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-0248
EazyDocs 2.3.8 - 2.3.9 - Missing Authorization
Critical
CVE-2023-6623
Essential Blocks <= 4.4.2 - Unauthenticated Local File Inclusion
High
CVE-2023-6620
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-50857
Automation By Autonami <= 2.6.1 - Authenticated(Administrator+) SQL Injection
Critical
CVE-2023-50839
JS Help Desk <= 2.8.1 - Unauthenticated SQL Injection via email and trackingid
Medium
CVE-2023-50844
Mail logging – WP Mail Catcher <= 2.1.3 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-6855
Paid Memberships Pro <= 2.12.5 - Missing Authorization via API
Medium
CVE-2023-4925
Easy Forms for Mailchimp <= 6.8.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-50843
Clockwork SMS Notfications <= 3.0.4 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-6555
Email Subscription Popup <= 1.2.19 - Reflected Cross-Site Scripting
Medium
CVE-2023-6042
Getwid – Gutenberg Blocks <= 2.0.2 - Improper Input Validation to Arbitrary Email Sending to Admin
Medium
CVE-2023-6583
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality
Medium
CVE-2023-6496
Manage Notification E-mails <= 1.8.5 - Missing Authorization
Medium
CVE-2023-40003
WP Project Manager <= 2.6.7 - Missing Authorization
Medium
CVE-2023-49860
WP Project Manager <= 2.6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-50373
Alt Manager <= 1.6.1 - Missing Authorization
Medium
CVE-2023-49851
Square Thumbnails <= 1.1.0 - Missing Authorization
Critical
CVE-2024-31211
WordPress Core 6.4.0 - 6.4.1 - Remote Code Execution POP Chain
Medium
CVE-2023-49842
Rocket Maintenance Mode & Coming Soon Page <= 4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.