Medium
5124be64-6679-4dc5-8117-55c73ae91489
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Low
4edbfeee-b668-4a85-a030-c15d6583dc82
Abandoned Cart Lite for WooCommerce <= 5.16.0 - Improper Authorization via wcal_preview_emails
Medium
CVE-2023-2446
UserPro <= 5.1.1 - Sensitive Information Disclosure via Shortcode
Medium
CVE-2023-47841
Analytify Dashboard <= 5.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-47848
Tainacan <= 0.20.4 - Reflected Cross-Site Scripting
Low
CVE-2023-5907
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal
High
CVE-2023-6035
EazyDocs <= 2.3.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-47849
BlossomThemes Email Newsletter <= 2.2.4 - Missing Authorization
High
CVE-2023-5674
WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL Injection via id
Medium
CVE-2023-47828
wpMandrill <= 1.33 - Missing Authorization via getAjaxStats
Medium
CVE-2023-6077
Ultimate Responsive Image Slider <= 3.5.11 - Missing Authorization via AJAX action
High
CVE-2023-6187
Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2023-38399
Phlox Portfolio <= 2.3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2023-47817
Daily Prayer Time <= 2023.10.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2023-39163
Phlox Shop <= 2.0.0 - Unauthenticated Local File Inclusion
Medium
CVE-2023-47793
Acme Fix Images <= 1.0.0 - Missing Authorization via acme_fix_images_ajax_callback
High
91f86c22-94db-4c43-985a-2f3dd96ece21
Welcart e-Commerce <= 2.9.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-47810
Ajax Domain Checker <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47821
Email Encoder Bundle <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2023-37888
Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion
Medium
CVE-2023-47769
WP Maintenance <= 6.1.3 - IP Restriction Bypass
Medium
CVE-2023-5955
Contact Form Email <= 1.3.43 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-47839
eCommerce Product Catalog for WordPress <= 3.3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-5105
Frontend File Manager Plugin <= 22.5 - Authenticated (Editor+) Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.