Medium
CVE-2023-47524
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-47546
OneClick Chat to Order <= 1.0.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47550
Donations Made Easy – Smart Donations <= 4.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47652
Auto Affiliate Links <= 6.4.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-47522
Photo Feed <= 2.2.1 - Reflected Cross-Site Scripting via pf-gid
Medium
CVE-2023-4930
Front End PM < 11.4.3 - Sensitive Information Exposure via Directory Listing
Medium
CVE-2023-5558
LearnPress <= 4.2.5.3 - Reflected Cross-Site Scripting via add_internal_scripts_to_head
Medium
CVE-2023-47551
Donations Made Easy – Smart Donations <= 4.0.12 - Cross-Site Request Forgery
Medium
CVE-2023-47532
WP Crowdfunding <= 2.1.6 - Reflected Cross-Site Scripting via postid
Medium
CVE-2023-47661
Dragfy Addons for Elementor <= 1.0.2 - Missing Authorization via save_settings
Medium
CVE-2023-47651
WP Links Page <= 4.9.4 - Cross-Site Request Forgery via wplf_ajax_update_screenshots
Medium
CVE-2023-47512
Product Enquiry for WooCommerce <= 3.1 - Unauthenticated Stored Cross-Site Scripting via name
Critical
CVE-2023-47507
Master Slider Pro <= 3.6.5 - Unauthenticated PHP Object Injection
Medium
CVE-2023-47511
Pinyin Slugs <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47646
Recently viewed and most viewed products <= 1.1.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
High
CVE-2023-47530
Redirect 404 Error Page to Homepage or Custom Page with Logs <= 1.8.7 - Authenticated (Administrator+) SQL Injection
Medium
55234307-9d51-4fe8-bc22-78d32a5fed11
Solid Central <= 3.0.0 - Stored Cross-Site Scripting via packages
High
CVE-2023-47558
Who Hit The Page – Hit Counter <= 1.4.14.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-47647
BadgeOS <= 3.7.1.6 - Missing Authorization
Medium
CVE-2023-47657
Direct Checkout – Quick View – Buy Now For WooCommerce <= 1.5.8 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Custom CSS Code
Medium
CVE-2023-47544
Atarim <= 3.12 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-47554
Actueel Financieel Nieuws – Denk Internet Solutions <= 5.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
High
CVE-2023-5235
Ovic Responsive WPBakery <= 1.2.8 - Authenticated (Subscriber+) Arbitrary Option Update
Medium
CVE-2023-41129
Patreon WordPress <= 1.8.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.