Medium
CVE-2023-0713
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-0722
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
High
CVE-2023-0477
Auto Featured Image (Auto Post Thumbnail) <= 3.9.15 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2023-0712
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
Medium
CVE-2023-0724
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
Medium
CVE-2023-0685
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
Medium
CVE-2022-46848
Visualizer <= 3.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-25035
Quick Contact Form <= 8.0.3.1 - Cross-Site Request Forgery to Sensitive Information Disclosure
Medium
CVE-2022-45810
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection
Medium
CVE-2023-25024
Icegram Collect <= 1.3.8 - Authenticated(Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2023-23885
Quick Contact Form <= 8.0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-25027
Chained Quiz <= 1.3.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0684
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
Medium
CVE-2023-25023
WebinarIgnition <= 2.14.2 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-47603
Gallery – Image and Video Gallery with Thumbnails <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-45360
Commenter Emails <= 2.6.1 - Unauthenticated CSV Injection
Medium
cfc59e3d-13c6-4051-8a1a-d109ea06b10b
Opening Hours <= 2.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0543
Arigato Autoresponder and Newsletter <= 2.1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-3388
Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-24386
AI Contact Us Form <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23723
WP Email Capture <= 3.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23888
RankMath SEO <= 1.0.107.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2022-4714
WP Dark Mode <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-0232
WooLentor <= 2.5.3 - PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.