Medium
CVE-2023-47756
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
501e9cd1-1187-4d01-a3cc-5edba64c391f
Image Compressor & Optimizer - iLoveIMG <= 1.0.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-47757
AWeber <= 7.3.9 - Missing Authorization via AJAX actions
Medium
CVE-2023-47759
Chaty <= 3.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-47762
BetterDocs <= 2.5.2 - Missing Authorization via AJAX actions
Critical
CVE-2023-5952
Welcart e-Commerce <= 2.9.4 - Unauthenticated PHP Object Injection
High
CVE-2023-47679
Qi Addons For Elementor <= 1.6.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2023-47683
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.6 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2023-47686
Arigato Autoresponder and Newsletter <= 2.7.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-47692
Flo Forms <= 1.0.41 - Missing Authorization via flo_send_test_email
High
CVE-2023-38519
MainWP <= 4.4.3.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-47664
Plainview Protect Passwords <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2023-47665
Plainview Protect Passwords <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-47513
ARI Stream Quiz <= 1.3.2 - Authenticated(Contributor+) Content Injection
Medium
CVE-2023-5982
UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update
Medium
CVE-2023-47515
Seers <= 8.1.1 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-47244
Email Marketing for WooCommerce by Omnisend <= 1.13.8 - Sensitive Information Exposure
Medium
CVE-2023-47545
Forms for Mailchimp by Optin Cat <= 2.5.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Critical
CVE-2023-47507
Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection
Medium
CVE-2023-47544
Atarim <= 3.12 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-47549
EazyDocs <= 2.3.5 - Unauthenticated Stored Cross-Site Scripting via edit_doc_one_page
Medium
CVE-2023-39926
Under Construction / Maintenance Mode from Acurax <= 2.6 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-47648
EazyDocs <= 2.3.5 - Missing Authorization via doc_one_page and edit_doc_one_page
High
CVE-2023-5958
POST SMTP Mailer <= 2.7.0 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.