Critical
CVE-2023-5105
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
b3d4f658-e9ce-490b-bcaa-1061a463dbb2
Premmerce Redirect Manager <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6532
WP Blogs' Planetarium <= 1.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-47756
Welcome Email Editor <= 5.0.5 - Missing Authorization via ajax_handler
Critical
CVE-2023-6063
WP Fastest Cache <= 1.2.1 - Unauthenticated SQL Injection
Medium
CVE-2023-4726
Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-7297
TwitterPosts <= 1.0.2 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2023-5137
Simply Excerpts <= 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5874
Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5884
Word Balloon <= 4.20.2 - Cross-Site Request Forgery
High
501e9cd1-1187-4d01-a3cc-5edba64c391f
Image Compressor & Optimizer - iLoveIMG <= 1.0.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-5210
AMP+ Plus <= 3.0 - Reflected Cross Site Scripting
Medium
CVE-2023-47757
AWeber <= 7.3.9 - Missing Authorization via AJAX actions
Medium
CVE-2023-47759
Chaty <= 3.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-6109
YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation
Medium
CVE-2023-47762
BetterDocs <= 2.5.2 - Missing Authorization via AJAX actions
High
CVE-2023-5108
Easy Newsletter Signups <= 1.0.4 - Authenticated (Admin+) SQL Injection
Medium
2330b18e-0907-47e1-b91f-1fe466bcf76b
Sprout Invoices <= 20.5.3 - Sensitive Information Exposure
Medium
CVE-2023-5809
Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47758
Multi Step Form <= 1.7.12 - Cross-Site Request Forgery
Medium
CVE-2023-4603
Star CloudPRNT for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-5141
BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-47764
Ditty <= 3.1.24 - Missing Authorization via save_ditty_permissions_check
High
CVE-2023-47129
Statamic CMS remote code execution via front-end form uploads
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.