Medium
CVE-2023-49846
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-49843
First Order Discount Woocommerce <= 1.21 - Cross-Site Request Forgery
Medium
CVE-2023-6113
WP STAGING WordPress Backup Plugin Free <= 3.1.2 and Pro <= 5.1.2 - Sensitive Information Exposure
Critical
CVE-2024-31211
WordPress Core 6.4.0 - 6.4.1 - Remote Code Execution POP Chain
Medium
CVE-2023-5845
Simple Social Media Share Buttons <= 5.1.0 - Unauthenticated Password Protected Post Disclosure
Medium
CVE-2023-49849
Shortcoder <= 6.3 - Missing Authorization
Medium
CVE-2023-50368
Shortcodes and extra features for Phlox theme <= 2.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-49845
Redirects <= 1.2.1 - Missing Authorization
Medium
CVE-2023-5712
System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value)
Medium
CVE-2023-49840
Multi Currency For WooCommerce <= 1.5.5 - Cross-Site Request Forgery
Medium
CVE-2023-5604
Asgaros Forum <= 2.7.0 - Insufficient Authorization to Authenticated (Admin+) Arbitrary File Upload
High
CVE-2023-48777
Elementor <= 3.18.1 - Authenticated(Contributor+) Arbitrary File Upload to Remote Code Execution via Template Import
Medium
CVE-2023-5714
System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)
Medium
CVE-2023-49844
WPPerformanceTester <= 2.0.0 - Cross-Site Request Forgery
Medium
CVE-2023-5922
Royal Elementor Addons and Templates <= 1.3.80 - Missing Authorization to Private/Password Protected Post Read
Medium
CVE-2023-49841
Optin Forms <= 1.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-5761
Burst Statistics – Privacy-Friendly Analytics for WordPress 1.4.0 to 1.4.6.1 - Unauthenticated SQL Injection
Medium
CVE-2023-49847
Annual Archive <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-5711
System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)
Medium
CVE-2023-49842
Rocket Maintenance Mode & Coming Soon Page <= 4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-49293
Vite XSS vulnerability in `server.transformIndexHtml` via URL payload
Medium
ghsa-7mc6-x925-7qvx
Test code in published microsoft-graph-beta package exposes phpinfo()
Medium
CVE-2023-49283
Test code in published microsoft-graph-core package exposes phpinfo()
Medium
CVE-2023-49282
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.