Medium
CVE-2023-35909
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
15f3a6e1-6126-4825-b2b1-e40dc5694f43
Atarim - Client Interface <= 3.9.1 - Missing Authorization via AJAX actions
High
CVE-2023-3087
FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject
High
CVE-2022-46849
Coming Soon Page <= 1.5.9 - Authenticated (Administrator+) SQL Injection
High
CVE-2023-3092
SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject
High
CVE-2023-3088
WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email
Critical
CVE-2023-37389
Booking Package <= 1.5.98 - Authorization Bypass to Arbitrary Password Reset
High
CVE-2023-3168
WP Reroute Email <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-37387
Classified Listing <= 2.4.5 - Cross-Site Request Forgery via rtcl_ajax_thumbnail_delete
Critical
CVE-2023-3342
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2023-31230
Baidu Tongji generator <= 1.0.2 - Cross-Site Request Forgery
Medium
CVE-2023-23893
Simple Giveaways <= 2.46.0 - Missing Authorization via AJAX actions
High
CVE-2023-3343
User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2023-36381
Zippy <= 1.6.5 - Authenticated(Author+) PHP Object Injection via unzipPosts
Critical
155e3de1-e115-4683-bb4d-a0c5667dc3d3
WP Post Author <= 3.2.3 - Privilege Escalation
Critical
CVE-2023-2982
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass
Medium
CVE-2023-23684
WPGraphQL <= 1.14.5 - Authenticated (Editor+) Server-Side Request Forgery
Medium
CVE-2023-36523
Email download link <= 3.7 - Unauthenticated Sensitive Information Exposure
Medium
20910787-b99d-475e-acc9-cc2bb669aa56
Waitlist Woocommerce ( Back in stock notifier ) <= 2.5.2 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2023-1844
Subscribe2 <= 10.40 - Missing Authorization
Medium
CVE-2023-3178
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Arbitrary Log Deletion
Medium
CVE-2023-3407
Subscribe2 <= 10.40 - Cross-Site Request Forgery
Medium
CVE-2023-3179
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Account Compromise
Medium
CVE-2023-3245
Floating Chat Widget - Chaty <= 3.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.