Medium
CVE-2023-47528
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-47518
Restrict Categories <= 2.6.4 - Reflected Cross-Site Scripting via rc-search
Medium
CVE-2023-47519
WooCommerce Product Table Lite <= 2.6.2 - Cross-Site Request Forgery
Medium
CVE-2023-47654
BZScore – Live Score <= 1.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-5819
Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-47658
Extra Product Options for WooCommerce <= 4.1 - Authenticated (Shop manager+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-47549
EazyDocs <= 2.3.5 - Unauthenticated Stored Cross-Site Scripting via edit_doc_one_page
Medium
CVE-2023-47655
ANAC XML Bandi di Gara <= 7.5 - Cross-Site Request Forgery via settings.php
Medium
CVE-2023-39926
Under Construction / Maintenance Mode from Acurax <= 2.6 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-47509
Edit WooCommerce Templates <= 1.1.1 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-5818
Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update
Medium
CVE-2023-47517
SendPress Newsletters <= 1.23.11.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-47650
Add Local Avatar <= 12.1 - Cross-Site Request Forgery via manage_avatar_cache
Medium
CVE-2023-47649
Best Restaurant Menu by PriceListo <= 1.3.1 - Cross-Site Request Forgery via menu_page
Medium
CVE-2023-47242
ANAC XML Bandi di Gara <= 7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47648
EazyDocs <= 2.3.5 - Missing Authorization via doc_one_page and edit_doc_one_page
Medium
CVE-2023-47516
Category Post List Widget <= 2.0 - Cross-Site Request Forgery via get_cplw_settings
High
CVE-2023-45380
Exposure of Private Personal Information to an Unauthorized Actor in Silbersaiten - Order Duplicator – Clone and Delete Existing Order module for PrestaShop
High
CVE-2023-43984
Exposure of Private Personal Information to an Unauthorized Actor in Smart Soft - Advanced Export Products Orders Cron CSV Excel module for PrestaShop
High
CVE-2023-44398
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable fu
Medium
CVE-2023-4888
Simple Like Page Plugin <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5076
Ziteboard Online Whiteboard <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ziteboard Shortcode
High
CVE-2023-4297
Mmm Simple File List <= 2.3 - Authenticated (Subscriber+) Directory Traversal
High
CVE-2023-5958
POST SMTP Mailer <= 2.7.0 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.