Medium
CVE-2023-2743
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 391
Reset filters
High
CVE-2023-2744
WP ERP <= 1.12.3 - Authenticated (Administrator+) SQL Injection via 'type'
Medium
CVE-2023-34008
WP ERP <= 1.12.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-23819
itemprop WP for SERP/SEO Rich snippets <= 3.5.201706131 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27415
LetterPress <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
High
CVE-2022-47430
The School Management – Education & Learning Management <= 4.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-30778
PowerPress <= 10.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-29197
guzzlehttp/psr7 < 1.9.1 & 2.4.5 - Interpretation Conflict
Medium
CVE-2023-0824
UserPlus <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-1917
PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-1371
W4 Post List <= 2.4.5 - Information Disclosure via post_excerpt
Medium
CVE-2023-23707
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG files
Medium
CVE-2023-1068
Download Read More Excerpt Link <= 1.6.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-26011
Read More Excerpt Link <= 1.5 - Cross-Site Request Forgery
High
d589bada-3568-45ed-9f7c-fb14363a617a
MainWP (Various extensions) - Missing Authorization to Arbitrary Page/Post Deletion
High
cb105ff0-5085-4813-81a6-b1f0798d576c
MainWP (Various extensions) - Cross-Site Request Forgery
Medium
CVE-2023-23745
MainWP Boilerplate Extension <= 4.1 - Missing Authorization to Plugin Settings Change
Medium
CVE-2022-29416
Afterpay Gateway for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
Medium
7255319c-8175-4885-8f94-3f46f9e577a6
Super Progressive Web Apps <= 2.2.8 - Missing Authorization
Medium
CVE-2022-3984
Flowerplayer Video Player <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2022-37599
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
High
01aa00db-43e5-4c8a-a005-77a39ec89c94
MemberPress Downloads <= 1.2.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
35cc980b-9c52-4f0b-aeb2-4afa6efacd8f
WP ERP <=1.10.5 - Sensitive Data Exposure
High
b536028d-4e11-4bda-8097-b37857a28309
Thumbnail For Excerpts <= 2.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.