Medium
CVE-2023-44991
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2023-5645
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL injection via key
Medium
CVE-2023-44982
WP Retina 2x <= 6.4.5 - Sensitive Information Exposure
Medium
CVE-2023-41671
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-48769
Chat Bubble <= 2.3 - Cross-Site Request Forgery via cbb_submit_settings_data
Medium
CVE-2023-48752
Happyforms <= 1.25.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-38474
Campaign Monitor for WordPress <= 2.8.12 - Reflected Cross-Site Scripting
Medium
CVE-2023-6289
Swift Performance Lite <= 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export
Medium
CVE-2023-48753
Restricted Site Access <= 7.4.1 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2023-6226
WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure
Medium
CVE-2023-6295
SiteOrigin Widgets Bundle < 1.51.0 - Authenticated (Admin+) Local File Inclusion
Critical
CVE-2023-6584
WP JobSearch <= 2.3.3 - Authentication Bypass
Medium
CVE-2023-48744
Availability Calendar <= 1.2.6 - Cross-Site Request Forgery via add_availability_calendar_create_admin_page()
Medium
CVE-2023-40680
Yoast SEO <= 21.0 - Authenticated (Seo Manager+) Stored Cross-Site Scripting
Medium
CVE-2023-48282
Taxonomy filter <= 2.2.9 - Cross-Site Request Forgery via taxonomy_filter_save_main_settings()
High
CVE-2023-48741
ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-48325
Landing Page Builder <= 1.5.1.5 - Open Redirect
Medium
CVE-2023-48318
Contact Form Email <= 1.3.41 - Captcha Bypass
Medium
CVE-2023-48332
Mail Bank - #1 Mail SMTP Plugin for WordPress <= 4.0.14 - Missing Authorization
Medium
CVE-2023-48285
Accept Stripe Payments <= 2.0.79 - Unauthenticated Content Injection
Medium
CVE-2023-48275
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Critical
CVE-2023-2449
UserPro <= 5.1.1 - Insecure Password Reset Mechanism
Critical
CVE-2023-2437
UserPro <= 5.1.1 - Authentication Bypass to Administrator
Low
52d1f9a3-243e-4e2c-a752-f40b6d275121
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_delete_expired_used_coupon_code
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.