Medium
CVE-2023-5116
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,583
Medium
CVE-2023-4252
EventPrime <= 3.3.2 - Improper Server-Side Checks to Booking Payment Bypass
Medium
CVE-2023-5073
iframe forms <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframe Shortcode
High
CVE-2023-5438
wp image slideshow <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5431
Left right image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5429
Information Reel <= 10.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
Critical
CVE-2023-5843
Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution
High
CVE-2023-5466
Wp anything slider <= 9.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5439
Wp photo text slider 50 <= 8.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5430
Jquery news ticker <= 3.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5434
Superb slideshow gallery <= 13.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-5096
HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5435
Up down image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5412
Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5464
Jquery accordion slideshow <= 8.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5428
Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
f3ebbf7f-61f2-403f-8131-8cedeb13c2d4
Mail logging - WP Mail Catcher <= 2.1.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-5559
10Web Booster <= 2.24.14 - Unauthenticated Arbitrary Option Deletion
Medium
CVE-2023-5251
Grid Plus <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete
Medium
CVE-2023-5611
Seraphinite Accelerator (Base, cache only) <= 2.20.31 - Cross-Site Request Forgery
High
caa39613-aaf3-4e47-8866-8fda1f7fc15b
Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-5163
Weather Atlas Widget <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5335
Buzzsprout Podcasting <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-46821
GD Security Headers <= 1.7 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.