Medium
CVE-2022-47595
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-23899
Extensions For CF7 <= 2.0.8 - Cross-Site Request Forgery
Medium
CVE-2023-23984
Bubble Menu – circle floating menu <= 3.0.1 - Cross Site Request Forgery
Medium
CVE-2022-4448
GiveWP <= 2.23.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-0224
GiveWP <= 2.23.2 - Unauthenticated SQL Injection
High
CVE-2023-0405
GPT AI Power <= 1.4.37 - Missing Authorization
High
CVE-2023-22714
Coming Soon by Supsystic <= 1.7.10 - Cross Site Request Forgery
High
d589bada-3568-45ed-9f7c-fb14363a617a
MainWP (Various extensions) - Missing Authorization to Arbitrary Page/Post Deletion
High
cb105ff0-5085-4813-81a6-b1f0798d576c
MainWP (Various extensions) - Cross-Site Request Forgery
Medium
CVE-2023-23663
MainWP Comments Extension <= 4.0.6 - Missing Authorization
High
CVE-2023-23645
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) PHP Code Injection
Critical
CVE-2023-23649
MainWP Links Manager Extension <= 2.1 - Unauthenticated PHP Object Injection
Medium
94f7f2d2-e90b-4978-bab8-eee160949567
MainWP UpdraftPlus Extension <= 4.0.6 - Missing Authorization
Critical
CVE-2023-23656
MainWP File Uploader Extension <= 4.1 - Unauthenticated Arbitrary File Upload
Medium
6c563616-e405-4b3e-a70a-543f42118a97
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary Plugin Installation
Medium
CVE-2023-23650
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
306a9960-7139-4142-a249-4de2b3c4b985
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2023-23660
MainWP Maintenance Extension <= 4.1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-0360
Location Weather <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Critical
CVE-2023-23737
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection
Medium
CVE-2023-23639
MainWP Staging Extension <= 4.0.3 - Missing Authorization to Arbitrary Plugin Activation
Medium
CVE-2023-23746
MainWP WordPress SEO Extension <= 4.0.1 - Missing Authorization to Arbitrary Plugin Activation
Medium
CVE-2023-23655
MainWP Code Snippets Extension <= 4.0.2 - Missing Authorization to Plugin Settings Change
Medium
CVE-2023-23745
MainWP Boilerplate Extension <= 4.1 - Missing Authorization to Plugin Settings Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.