Medium
CVE-2023-4888
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,538
Medium
CVE-2023-5076
Ziteboard Online Whiteboard <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ziteboard Shortcode
High
CVE-2023-4297
Mmm Simple File List <= 2.3 - Authenticated (Subscriber+) Directory Traversal
High
CVE-2023-5958
POST SMTP Mailer <= 2.7.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2023-5560
WP-UserOnline <= 2.88.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5974
WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
Medium
CVE-2023-5660
SendPress Newsletters <= 1.22.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Low
CVE-2023-5906
Job Manager & Career <= 1.4.3 - Sensitive Information Exposure
Medium
CVE-2023-4514
Mmm Simple File List <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5567
QR Code Tag <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5532
ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting via imgmap_save_area_title
High
CVE-2023-5653
WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored Cross-Site Scripting via IP
Medium
CVE-2023-47668
Restrict Content <= 3.2.7 - Information Exposure via legacy log file
Medium
CVE-2023-5507
ImageMapper <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5975
ImageMapper <= 1.2.6 - Cross-Site Request Forgery to Plugin Settings Change via ajax
Medium
CVE-2023-5738
WordPress Backup & Migration <= 1.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-4842
Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5664
Garden Gnome Package <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5661
Social Feed <= 1.5.4.6 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5709
WD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via Shortcode
Critical
CVE-2023-4922
WPB Show Core <= 2.2 - Unauthenticated Local File Inlclusion
Medium
CVE-2023-5658
WP MapIt <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5620
Webpushr <= 4.34.0 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5737
WordPress Backup & Migration <= 1.4.3 - Missing Authorization to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.