Critical
CVE-2023-51478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
Medium
CVE-2023-51506
WPCS – WordPress Currency Switcher Professional <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-51470
Rencontre – Dating Site <= 3.11.1 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2023-51421
Verge3D <= 4.5.2 - Authenticated(Subscriber+) Arbitrary File Upload
Medium
CVE-2023-51670
FunnelKit Checkout <= 3.10.3 - Authenticated(Subscriber+) Missing Authorization to Arbitrary Plugin Activation
Medium
CVE-2023-51529
HT Mega <= 2.3.3 - Cross-Site Request Forgery via Several Functions
Medium
CVE-2023-51502
WooCommerce Stripe Payment Gateway <= 7.6.1 - Insecure Direct Object Reference via update_payment_intent_ajax
Medium
CVE-2023-51522
Paid Member Subscriptions <= 2.10.4 - Cross-Site Request Forgery via ajax_add_log_entry
Medium
CVE-2023-51503
WooPayments – Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2023-51486
WooCommerce PDF Invoice Builder <= 1.2.101 - Cross-Site Request Forgery
Medium
CVE-2023-51676
Happy Addons for Elementor <= 3.9.1.1 - Server Side Request Forgery
Medium
CVE-2023-51497
WooCommerce Ship to Multiple Addresses <= 3.8.9 - Missing Authorization
Medium
CVE-2023-51685
WP Review Slider <= 12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-51484
Login as User or Customer (User Switching) <= 3.8 - Authentication Bypass
Critical
CVE-2023-51468
Rencontre – Dating Site <= 3.10.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-51539
Apollo13 Framework Extensions <= 1.9.1 - Cross-Site Request Forgery
Medium
CVE-2023-51542
Branda <= 3.4.14 - IP Address Spoofing
Medium
CVE-2023-51528
GPT3 AI Content Writer <= 1.8.12 - Cross-Site Request Forgery
Medium
CVE-2023-51498
WooCommerce Canada Post Shipping <= 2.8.3 - Missing Authorization
Medium
CVE-2023-51687
Product Catalog Simple <= 1.7.6 - Sensitive Information Exposure via Product CSV
Medium
CVE-2023-51682
MC4WP <= 4.9.9 - Missing Authorization via listen
Medium
CVE-2023-51535
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery
Medium
CVE-2023-51531
Thrive Automator <= 1.17 - Cross-Site Request Forgery
Medium
CVE-2023-51521
Quiz And Survey Master <= 8.1.18 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.