Medium
CVE-2023-6798
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2023-6990
Weaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-21747
WP ERP <= 1.12.8 - Authenticated (Accounting manager+) SQL Injection
Medium
CVE-2023-7019
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder <= 2.6.8 - Missing Authorization
Medium
CVE-2023-6801
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-52211
WP Job Manager <= 2.0.0 - Missing Authorization
Medium
CVE-2023-52220
Google Analytics by Monster Insights <= 8.21.0 - Missing Authorization
Medium
CVE-2023-52212
WP Job Manager <= 2.0.0 - Cross-Site Request Forgery
High
CVE-2024-21743
Houzez Login Register <= 3.2.5 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Critical
CVE-2023-52218
WooCommerce Tranzila Gateway <= 1.0.8 - Unauthenticated PHP Object Injection
Medium
CVE-2023-52231
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Medium
CVE-2023-52199
ActivityPub <= 1.0.5 - Missing Authorization
Medium
CVE-2024-21746
Wp Ultimate Review <= 2.3.6 - IP Spoofing
Medium
CVE-2023-6781
Orbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fields
High
CVE-2023-52219
Gecka Terms Thumbnails <= 1.1 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-6632
Happy Addons for Elementor <= 3.9.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-21748
Icegram <= 3.1.21 - Missing Authorization
Medium
CVE-2023-6551
class.upload.php allows cross-site scripting attacks via uploaded files
High
CVE-2023-50256
Froxlor username/surname AND company field Bypass
High
CVE-2023-6944
@backstage/backend-app-api leaks GitLab access tokens
Medium
CVE-2023-6493
Depicter Slider – Responsive Image Slider, Video Slider & Post Slider <= 2.0.6 - Cross-Site Request Forgery via save
Medium
CVE-2023-7199
Relevanssi <= 4.21.2 (Free) and < 2.25.0 (Premium) - Missing Authorization to Unauthorized Post Access
Medium
CVE-2024-0212
Cloudflare <= 4.12.2 - Missing Authorization via initProxy
Medium
CVE-2024-21752
Ajax Search Lite <= 4.11.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.