Medium
CVE-2023-35884
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2023-33327
Leyka <= 3.30.2 - Privilege Escalation via Admin Password Reset
Medium
CVE-2023-2580
AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable <= 1.6.82 - Authenticated (Admin+) Stored Cross-Site Scripting
Low
CVE-2023-31233
Baidu Tongji generator <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32964
Better Notifications for WP <= 1.9.2 - Cross-Site Request Forgery via handle_actions
Critical
CVE-2023-2704
BP Social Connect <= 1.5 - Authentication Bypass
Medium
CVE-2023-2261
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
Medium
CVE-2023-23900
Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting via 'sql_error'
High
CVE-2023-2757
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2023-2706
OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation
Medium
834c92ba-8b48-4ae3-9073-085e8f559762
WordPress Core < 6.2.1 - Insufficient Sanitization of Block Attributes
Medium
CVE-2023-32798
Simple Page Ordering <= 2.5.0 - Missing Authorization to Information Disclosure
Medium
3baa0543-cdfb-4699-97ca-eaa83c2494a1
Chaty <= 3.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25019
Chaty <= 3.0.9 - Reflected Cross-Site Scripting
High
CVE-2023-2718
Contact Form Email <= 1.3.37 - Unauthenticated Stored Cross-Site Scripting
Medium
0da1cc3b-5d6b-4ca0-9d8a-31c63ab5b9c9
WordPress Core < 6.2.1 - Cross-Site Request Forgery
High
CVE-2023-32795
WooCommerce Product Add-ons <= 6.1.3 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2023-2337
ConvertKit <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-2708
Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting
Critical
CVE-2023-2499
RegistrationMagic <= 5.2.1.0 - Authentication Bypass
Medium
CVE-2023-32591
DBargain <= 3.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Critical
CVE-2023-32242
Woodmart Core <= 1.0.36 - PHP Object Injection
Critical
CVE-2023-32243
Essential Addons for Elementor <= 5.7.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
Medium
CVE-2023-32576
Locatoraid Store Locator <= 3.9.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.