Medium
CVE-2023-32796
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-47670
Korea SNS <= 1.6.4 - Cross-Site Request Forgery via kon_tergos_options
Medium
CVE-2023-47673
Post Pay Counter <= 2.789 - Reflected Cross-Site Scripting
Medium
4a134509-8dc0-41ac-9b5c-5b173a1e3c68
Product Catalog Simple <= 1.7.5 - Cross-Site Request Forgery via ic_system_status
Medium
CVE-2023-47671
Vertical scroll recent post <= 14.0 - Cross-Site Request Forgery via vsrp_admin_options
Critical
CVE-2023-46244
XWiki Platform privilege escalation from script right to programming right through title displayer
High
CVE-2023-46243
XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action
Critical
CVE-2023-46242
XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token
Medium
CVE-2023-47552
Image Hover Effects <= 5.5 - Cross-Site Request Forgery
Medium
fb6f4b0b-25b8-4dcd-b002-293ce8ab307e
NitroPack <= 1.9.2 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-47513
ARI Stream Quiz <= 1.3.2 - Authenticated(Contributor+) Content Injection
Medium
CVE-2023-47653
TWB Woocommerce Reviews <= 1.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47644
ProfileGrid <= 5.7.1 - Cross-Site Request Forgery
Medium
CVE-2023-47557
Visitors Traffic Real Time Statistics <= 7.2 - Missing Authorization via multiple AJAX actions
Medium
f3d5bc99-2b55-4e19-8304-e56f3d4a2f1a
Ecwid Ecommerce Shopping Cart <= 6.12.3 - Missing Authorization on multiple functions
Medium
eb94520e-a99d-4e34-b174-e01898de0978
Custom post types <= 4.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47547
Products, Order & Customers Export for WooCommerce <= 2.0.10 - Reflected Cross-Site Scripting via date parameters
Medium
CVE-2023-47660
Product Visibility by Country for WooCommerce <= 1.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47659
Lava Directory Manager <= 1.1.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47531
Droit Dark Mode <= 1.1.2 - Cross-Site Request Forgery
Medium
CVE-2023-5982
UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update
Medium
CVE-2023-5006
WP Discord Invite < 2.5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-47520
Responsive Column Widgets <= 1.2.7 - Reflected Cross-Site Scripting via tab
Medium
CVE-2023-47523
Auto Tag Creator <= 1.0.2 - Missing Authorization via tag_save_settings_callback
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.