Medium
CVE-2023-27426
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-27415
LetterPress <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-32585
Portfolio Gallery – Responsive Image Gallery <= 1.4.5 - Missing Authorization to Arbitrary Gallery Deletion
Medium
CVE-2023-29238
Whydonate – FREE Donate button <= 3.12.14 - Cross-Site Request Forgery
High
CVE-2023-54346
Backup Migration <= 1.2.8 - Sensitive Information Exposure
High
CVE-2023-2252
Directorist <= 7.5.3 - Authenticated (Administrator+) Local File Inclusion
Medium
CVE-2022-45354
Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API
Medium
CVE-2023-2472
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.60 - Reflected Cross-Site Scripting via 'lang'
Medium
CVE-2023-32517
MailChimp Subscribe Forms <= 4.0.9.3 - Open Redirect
Medium
CVE-2023-32513
GiveWP <= 2.25.3 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2023-32507
Woo Custom Emails <= 2.2 - Missing Authorization to Unauthenticated Settings Change
Medium
CVE-2023-24413
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
Medium
CVE-2023-32512
ShortPixel Adaptive Images <= 3.7.1 - Cross-Site Request Forgery via shortpixel_ai_handle_page_action
Critical
CVE-2023-29386
Manager for Icomoon <= 2.0 - Unauthenticated Arbitrary File Upload via 'upload'
Medium
CVE-2022-41786
WP Job Portal <= 2.0.1 - Cross-Site Request Forgery to Settings Modification
Medium
CVE-2023-27630
Community by PeepSo <= 6.0.9.0 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-32119
WPO365 | Mail Integration for Office 365 / Outlook <= 1.9.0 - reflected Cross-Site Scripting via error_description
High
CVE-2023-30750
CM Pop-Up banners <= 1.5.10 - Authenticated (Subscriber+) SQL Injection via getStatistics
High
CVE-2023-32110
JupiterX Theme <= 3.0.0 - Authenticated Local File Inclusion via print_pane
High
CVE-2023-2288
Otter - Gutenberg Blocks <= 2.2.5 - Authenticated (Author+) PHAR Deserialization
Critical
CVE-2023-30869
Easy Digital Downloads 3.1 - 3.1.1.4.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
Medium
CVE-2023-2256
PPOM for WooCommerce <= 32.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-47590
Maintenance Switch <= 1.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-47606
WP-CORS <= 0.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.