Medium
CVE-2023-51362
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-51399
Back Button Widget <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-50880
BuddyPress <= 11.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50879
WordPress.com Editing Toolkit <= 3.78784 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-51357
Conversios.io <= 6.5.0 - Missing Authorization
Medium
CVE-2023-50903
Metform Elementor Contact Form Builder <= 3.4.0 - Missing Authorization via submit
Medium
CVE-2023-50898
Sirv <= 7.1.2 - Missing Authorization via sirv_disconnect
Medium
CVE-2023-50892
TheGem <= 5.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-50878
MStore API <= 4.10.1 - Cross-Site Request Forgery
Medium
CVE-2023-6456
WP Review Slider <= 12.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-50885
Store Locator WordPress <= 1.4.14 - Authenticated(Administrator+) Directory Traversal to Arbitrary File Deletion
Medium
CVE-2023-51361
Sticky Chat Widget <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-50896
weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.17 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-50893
Impreza <= 8.17.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-51397
WP Remote Site Search <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50877
Product Filter by WBW <= 2.5.0 - Missing Authorization via getListForTbl
Medium
CVE-2023-51370
WP Chat App <= 3.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-51372
HashBar – WordPress Notification Bar <= 1.4.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-50876
Molongui <= 4.7.3 - Missing Authorization
High
CVE-2023-51355
WC Marketplace <= 4.0.23 - Missing Authorization via mvx_save_dashpages
Medium
CVE-2023-50901
HT Mega – Absolute Addons For Elementor <= 2.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-50887
User Feedback <= 1.0.10 - Missing Authorization
Medium
CVE-2023-50881
Advanced Access Manager <= 6.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50891
Zoho Forms <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.