High
CVE-2023-6009
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 391
Reset filters
Critical
CVE-2023-2449
UserPro <= 5.1.1 - Insecure Password Reset Mechanism
Critical
CVE-2023-2437
UserPro <= 5.1.1 - Authentication Bypass to Administrator
Medium
CVE-2023-2438
UserPro <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via userpro_save_userdata
Medium
CVE-2023-2448
UserPro <= 5.1.4 - Missing Authorization to Arbitrary Shortcode Execution via userpro_shortcode_template
High
CVE-2023-2440
UserPro <= 5.1.1 - Cross-Site Request Forgery to Privilege Escalation
High
CVE-2023-6007
UserPro <= 5.1.1 - Missing Authorization via multiple functions
Medium
CVE-2023-2446
UserPro <= 5.1.1 - Sensitive Information Disclosure via Shortcode
Medium
CVE-2023-2447
UserPro <= 5.1.1 - Cross-Site Request Forgery to Sensitive Information Exposure
Medium
CVE-2023-7297
TwitterPosts <= 1.0.2 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2023-5137
Simply Excerpts <= 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46776
Auto Excerpt everywhere <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2023-45764
Scroll post excerpt <= 8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
CVE-2023-5957
Ni Purchase Order(PO) For WooCommerce <= 1.2.1 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-4290
WP Matterport Shortcode <= 2.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-4289
WP Matterport Shortcode <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4820
PowerPress <= 11.0.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Media URL
Medium
CVE-2023-41865
Slider Pro <= 4.8.6 - Missing Authorization via AJAX actions
Medium
CVE-2023-41239
PowerPress <= 11.0.6 - Authenticated (Contributor+) Server-Side Request Forgery via wp_ajax_powerpress_media_info
Medium
CVE-2023-3814
Advanced File Manager <= 5.1 - Authenticated (Administrator+) Arbitrary File and Folder Access
Medium
CVE-2023-37393
Atarim <= 3.9.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-35094
WP Matterport Shortcode <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
64371d43-3acd-4863-80e4-deab071777b9
PowerPress <= 10.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Feed[title]'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.