Medium
CVE-2023-52123
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Medium
CVE-2023-52121
NitroPack <= 1.10.2 - Cross-Site Request Forgery
Medium
CVE-2023-6626
Product Enquiry for WooCommerce <= 3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-52118
WP User Profile Avatar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-52142
Events Shortcodes & Templates For The Events Calendar <= 2.3.1 - Authenticated (Contributor+) SQL Injection via shortcode
Medium
CVE-2023-52148
Affiliates Manager <= 2.9.30 - Sensitive Information Exposure via Log File
Medium
CVE-2023-52120
NEX-Forms – Ultimate Form Builder <= 8.5.2 - Cross-Site Request Forgery
Medium
CVE-2023-52135
WS Form LITE <= 1.9.170 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-52134
GEO my WordPress <= 4.0.2 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-49777
YITH WooCommerce Product Add-Ons <= 4.3.0 - Authenticated(Shop Manager+) PHP Object Injection
Low
CVE-2023-52144
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2023-52150
Dynamic Content for Elementor < 2.12.5 - Cross-Site Request Forgery
Medium
CVE-2023-52130
Affiliates Manager <= 2.9.31 - Cross-Site Request Forgery via multiple AJAX actions
Medium
CVE-2023-52131
Page Generator <= 1.7.1 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-52146
404 Solution <= 2.33.0 - Sensitive Information Exposure via Log File
Medium
CVE-2023-52117
ProfileGrid <= 5.6.6 - Missing Authorization
Medium
CVE-2023-52125
iFrame <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via srcdoc
Medium
CVE-2023-52126
Send Users Email <= 1.4.3 - Sensitive Information Exposure via Error Logs
Medium
CVE-2023-52132
WP Adminify <= 3.1.6 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-52127
WPC Product Bundles for WooCommerce <= 7.3.1 - Cross-Site Request Forgery
Medium
CVE-2023-52151
Uncanny Automator <= 5.1.0.2 - Sensitive Information Exposure via Log File
Medium
CVE-2023-52124
WP Tabs <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-52143
WP Stripe Checkout <= 1.2.2.37 - Sensitive Information Exposure via Debug Log
Medium
CVE-2023-52128
White Label <= 2.9.0 - Cross-Site Request Forgery via white_label_reset_wl_admins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.