Medium
CVE-2023-51416
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
Medium
CVE-2023-51669
Product Code for WooCommerce <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-51405
BookingPress <= 1.0.74 - Booking Price Manipulation via bookingpress_confirm_booking
Medium
CVE-2023-51677
Schema & Structured Data for WP & AMP <= 1.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-51410
WP Mail Log Plugin <= 1.1.2 - Authenticated(Contributor+) Arbitrary File Upload
Medium
CVE-2023-51496
WooCommerce Warranty Requests <= 2.2.7 - Missing Authorization
Medium
CVE-2023-51523
WooCommerce Easy Duplicate Product <= 0.3.0.7 - Missing Authorization via wedp_duplicate_product_action
Medium
CVE-2023-27150
OpenCRX Cross-site Scripting vulnerability
Medium
CVE-2023-51369
Customize My Account for WooCommerce <= 1.8.3 - Cross-Site Request Forgery via restore_my_account_tabs
Medium
CVE-2023-51402
Ultimate Addons for WPBakery <= 3.19.17 - Cross-Site Request Forgery
Medium
CVE-2023-51359
Essential Blocks for Gutenberg <= 4.2.0 - Incorrect Authorization Checks
High
CVE-2023-50890
Ultimate Addons for Elementor <= 1.36.20 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2023-40005
Easy Digital Downloads <= 3.1.5 - Missing Authorization
Medium
CVE-2023-51376
ProjectHuddle Client Site <= 1.0.34 - Missing Authorization via ph_child_ajax_notice_handler
Medium
CVE-2023-51377
Everest Forms <= 2.0.3 - Unauthorized Form Submission via Disabled Forms
Medium
CVE-2023-51374
ZeroBounce Email Verification & Validation <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-51356
ARMember <= 4.0.10 - Authenticated(Subscriber+) Privilege Escalation
Medium
CVE-2023-51373
Google Photos Gallery with Shortcodes <= 4.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-51362
All-in-one Floating Contact Form – My Sticky Elements <= 2.1.3 - Missing Authorization
Medium
CVE-2023-51399
Back Button Widget <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-50880
BuddyPress <= 11.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50879
WordPress.com Editing Toolkit <= 3.78784 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-51357
Conversios.io <= 6.5.0 - Missing Authorization
Medium
CVE-2023-50903
Metform Elementor Contact Form Builder <= 3.4.0 - Missing Authorization via submit
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.