Critical
CVE-2023-4922
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-5641
Martins Free & Easy SEO BackLink Link Building Network <= 1.2.29 - Reflected Cross-Site Scripting via _wpnonce
Low
CVE-2023-6160
LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
Medium
CVE-2022-47181
Email Templates <= 1.4.2 - Cross-Site Request Forgery via send_test_email
Medium
CVE-2023-48284
Decorator - WooCommerce Email Customizer <= 1.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-47186
Kadence WooCommerce Email Designer <= 1.5.11 - Cross-Site Request Forgery
Medium
CVE-2023-5606
ChatBot 4.8.6 - 4.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Medium
CVE-2023-5411
Funnelforms Free <= 3.4 - Missing Authorization to Post Modification
Medium
CVE-2023-5419
Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending
Medium
CVE-2023-4247
GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation
Medium
CVE-2023-4246
GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation
Critical
CVE-2023-47178
The Plus Addons for Elementor Pro <= 5.2.8 - Unauthenticated Local File Inclusion
Medium
CVE-2023-4248
GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion
High
CVE-2023-5099
HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2023-4252
EventPrime <= 3.3.2 - Improper Server-Side Checks to Booking Payment Bypass
High
f3ebbf7f-61f2-403f-8131-8cedeb13c2d4
Mail logging - WP Mail Catcher <= 2.1.3 - Authenticated (Admin+) SQL Injection
High
caa39613-aaf3-4e47-8866-8fda1f7fc15b
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-5049
Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5250
Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
Medium
CVE-2023-46824
Slick Popup: Contact Form 7 Popup Plugin <= 1.7.14 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-5583
WP Simple Galleries <= 1.34 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2023-5425
Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2023-5340
Five Star Restaurant Menu and Food Ordering <= 2.4.10 - Unauthenticated PHP Object Injection
High
CVE-2023-5820
Thumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery to Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.