Medium
CVE-2023-48740
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-48287
TextMe SMS <= 1.9.0 - Missing Authorization via tetxme_update_option_page()
Medium
CVE-2023-48281
Broken Link Checker for YouTube <= 1.3 - Cross-Site Request Forgery via plugin_settings_page()
Medium
CVE-2023-48737
TriPay Payment Gateway <= 3.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-48326
Events Manager <= 6.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-48335
Hide login page <= 1.1.7 - Login Page Disclosure
High
CVE-2023-48327
WC Vendors Marketplace <= 2.4.7 - Authenticated (Shop manager+) SQL Injection via search dates
Medium
CVE-2023-48323
Awesome Support <= 6.1.4 - Cross-Site Request Forgery via wpas_edit_reply_ajax()
Medium
CVE-2023-48324
Awesome Support <= 6.1.4 - Missing Authorization via wpas_edit_reply_ajax()
Medium
CVE-2023-48286
Accept Stripe Payments <= 2.0.79 - Insecure Direct Object Reference
Medium
CVE-2023-48330
Bulk Comment Remove <= 2 - Cross-Site Request Forgery via brc_admin()
Medium
CVE-2023-48329
Fast Custom Social Share by CodeBard <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6136
Debug Log Manager <= 2.2.1 - Missing Authorization
Medium
CVE-2023-48328
NextGEN Gallery <= 3.37 - Cross-Site Request Forgery
Medium
CVE-2023-48332
Mail Bank - #1 Mail SMTP Plugin for WordPress <= 4.0.14 - Missing Authorization
Medium
CVE-2023-48285
Accept Stripe Payments <= 2.0.79 - Unauthenticated Content Injection
Medium
CVE-2023-41128
WP Roadmap <= 1.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6137
Frontier Post <= 6.1 - Cross-Site Request Forgery
Medium
CVE-2023-48317
Display Custom Post <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-48320
Video Player <= 1.5.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38400
Enfold <= 5.6.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-48739
Porto Theme - Functionality <= 2.11.1 - Missing Authorization
High
CVE-2023-48319
Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation
High
CVE-2023-48742
License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.