High
CVE-2023-50841
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-51501
Uncode Core <= 2.8.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-50852
BookIt <= 2.4.3 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50853
Advanced Form Integration <= 1.75.0 - Authenticated(Administrator+) SQL Injection
Critical
CVE-2023-6623
Essential Blocks <= 4.4.2 - Unauthenticated Local File Inclusion
Medium
CVE-2023-50856
Funnel Builder for WordPress by FunnelKit <= 2.14.3 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-51515
Uncode Core <= 2.8.8 - Privilege Escalation
Medium
CVE-2023-50845
GeoDirectory <= 2.3.28 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-50847
Welcart e-Commerce <= 2.9.3 - Authenticated(Editor+) SQL Injection
High
CVE-2023-6620
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-50846
RegistrationMagic Plugin <= 5.2.4.5 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-50840
Booking Manager <= 2.1.5 - Authenticated(Contributor+) SQL Injection via Shortcode
Medium
CVE-2023-50854
Squirrly SEO - Advanced Pack < 2.4.02 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50857
Automation By Autonami <= 2.6.1 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-5905
DeMomentSomTres WordPress Export Posts With Images <= 20220825 - Missing Authorization to Blog Data Export
High
CVE-2023-50842
MF Gig Calendar <=1.2.1 - Authenticated(Contributor+) SQL Injection
Medium
CVE-2023-50837
Login Lockdown – Protect Login Form <= 2.06 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50855
Pre* Party Resource Hints < 1.8.19 - Authenticated(Administrator+) SQL Injection
Critical
CVE-2023-50839
JS Help Desk <= 2.8.1 - Unauthenticated SQL Injection via email and trackingid
Medium
CVE-2023-50851
Simply Schedule Appointments <= 1.6.5.27 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-51500
Uncode Core <= 2.8.8 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2023-50838
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.5 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-50844
Mail logging – WP Mail Catcher <= 2.1.3 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50848
404 Solution <= 2.34.0 - Authenticated(Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.