Medium
CVE-2023-4248
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 196
Reset filters
Medium
CVE-2023-5049
Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-41665
Give - Donation Plugin <= 2.33.0 - Authenticated(Give Manager+) Privilege Escalation
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-23893
Simple Giveaways <= 2.46.0 - Missing Authorization via AJAX actions
Low
b9002f6e-4345-4908-9cb8-9841a2458eb7
CartFlows <= 1.11.11 - Insecure Direct Object Reference to Arbitrary Post Deletion
Medium
248b74d3-5228-473d-a79a-743566898606
Simple Calendar <= 3.1.42 - Cross-Site Request Forgery to Transient Cache Clearing
Medium
CVE-2023-32513
GiveWP <= 2.25.3 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2023-31086
Simple Giveaways <= 2.46 - Cross-Site Request Forgery
Critical
CVE-2023-28787
Quiz and Survey Master <= 8.1.4 - Unauthenticated SQL Injection
Medium
d09a0b62-6556-4be5-a6f2-0cb0edcced3b
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_store_payment_note
Medium
a2dc1a04-5503-412b-92e7-ed86910abd92
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_delete_payment_note
Medium
5ea02dd5-d837-471c-aa6a-264ffcedd55d
GiveWP <= 2.25.2 - Cross-Site Request Forgery
Medium
CVE-2023-1121
Simple Giveaways <= 2.45.0 - Authenticated(Admin+) Stored Cross-Site Scripting via form fields
Medium
CVE-2023-1120
Simple Giveaways <= 2.45.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings
Medium
CVE-2023-1122
Simple Giveaways <= 2.45.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Form, Prize, and Sharing Method Fields
Medium
CVE-2022-40211
GiveWP <= 2.25.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-23672
GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion
Medium
CVE-2023-23668
GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode
Medium
cb7ec7ad-797b-4a5c-9b1c-31284083faef
GiveWP <= 2.25.1 - Cross-Site Request Forgery via save
Medium
CVE-2023-25450
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush
Medium
a9939ffe-a5d5-45cb-b673-665acf1ff09d
GiveWP <= 2.25.1 - Cross-Site Request Forgery via process_bulk_action
High
CVE-2023-22719
GiveWP <= 2.25.1 - Unauthenticated CSV Injection
Medium
2a0381b1-9b63-41cb-8125-d22274b98867
GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.