Medium
CVE-2023-4690
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
CVE-2023-38399
Phlox Portfolio <= 2.3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2023-47817
Daily Prayer Time <= 2023.10.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47815
BP Profile Shortcodes Extra <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-39163
Phlox Shop <= 2.0.0 - Unauthenticated Local File Inclusion
Low
CVE-2023-47820
WP Like Button <= 1.7.0 - Missing Authorization via crublabFBLBAjax
Medium
CVE-2023-5381
Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47793
Acme Fix Images <= 1.0.0 - Missing Authorization via acme_fix_images_ajax_callback
Medium
CVE-2023-47811
Anywhere Flash Embed <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
91f86c22-94db-4c43-985a-2f3dd96ece21
Welcart e-Commerce <= 2.9.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-47812
Bamboo Columns <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47814
BMI Calculator Plugin <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4723
Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-47822
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10 - Missing Authorization to Template Import
Medium
CVE-2023-47808
Add Widgets to Page <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47810
Ajax Domain Checker <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47777
WooCommerce <= 8.1.1 & WooCommerce Blocks <= 11.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image alt Attribute
Medium
CVE-2023-4689
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
Medium
CVE-2023-47805
WPCafe <= 2.2.22 - Missing Authorization
Medium
CVE-2023-47813
Better RSS Widget <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47821
Email Encoder Bundle <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2023-37888
Shortcodes and extra features for Phlox theme <= 2.14.0 - Unauthenticated Local File Inclusion
Medium
CVE-2023-47806
Disable User Login <= 1.3.8 - Cross-Site Request Forgery
High
CVE-2023-48217
Statamic CMS vulnerable to remote code execution via form uploads
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.