Medium
CVE-2023-51543
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
High
CVE-2023-51474
TerraClassifieds <= 2.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-51487
ARI Stream Quiz <= 1.2.32 - Cross-Site Request Forgery
Medium
CVE-2023-51681
Duplicator <= 1.5.7 - Cross-Site Request Forgery via views/tools/diagnostics/information.php
Medium
CVE-2023-51508
Database Cleaner <= 0.9.8 - Sensitive Information Exposure via Log File
Medium
CVE-2023-51527
AI Power: Complete AI Pack – Powered by GPT-4 <= 1.8.1 - Missing Authorization to Sensitive Data Exposure
Medium
CVE-2023-51526
Simple Staff List <= 2.2.4 - Missing Authorization via ajax_flush_rewrite_rules and staff_member_export
Medium
CVE-2023-51695
Everest Forms <= 2.0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-51404
My Agile Privacy <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vis Shortcode
Medium
CVE-2023-51525
WP Simple Booking Calendar <= 2.0.8.4 - Cross-Site Request Forgery
Critical
CVE-2023-51412
Piotnet Forms Plugin <= 1.0.28 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-51692
Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via CR_Manual
Medium
CVE-2023-51667
Rate my Post – WP Rating System <= 3.4.2 - IP Address Spoofing
Medium
CVE-2023-51408
WP Optin Wheel <= 1.4.2 - Sensitive Information Exposure via Log File
Medium
CVE-2023-51485
Pay with Vipps for WooCommerce <= 1.14.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-51424
WebinarIgnition <= 3.05.0 - Missing Authorization to Unauthenticated Privilege Escalation
Medium
CVE-2023-51480
Active Products Tables for WooCommerce <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-51675
Advanced Access Manager <= 6.9.18 - Authenticated (Author+) Open Redirect
Critical
CVE-2023-51419
BERTHA AI Plugin <= 1.11.10.7 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-51696
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery via apbct_settings__update_account_email
Medium
CVE-2023-51414
EnvíaloSimple <= 2.1 Unauthenticated PHP Object Injection
High
CVE-2023-51540
Custom 404 Pro <= 3.10.0 - Unauthenticated Stored Cross-Site Scripting via logging
Medium
CVE-2023-51532
Icegram <= 3.1.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Message
Medium
CVE-2023-51673
Stylish Price List <= 7.0.17 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.