Medium
CVE-2023-5234
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,583
Medium
CVE-2023-5666
Accordion <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5049
Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5250
Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
Medium
CVE-2023-5566
Simple Shortcodes <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-46823
ImageLinks <= 1.5.4 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-46822
WooCommerce - Store Exporter <= 2.7.2 - Reflected Cross-Site Scripting via 'filter'
Critical
CVE-2023-5199
PHP to Page <= 0.3 - Authenticated (Subscriber+) Local File Inclusion to Remote Code Execution via Shortcode
Medium
CVE-2023-46824
Slick Popup: Contact Form 7 Popup Plugin <= 1.7.14 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5164
Bellows Accordion Menu <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5565
Shortcode Menu <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5252
FareHarbor for WordPress <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5315
Google Maps made Simple <= 0.6 - Authenticated (Subscriber+) SQL Injection via Shortcode
High
CVE-2023-5583
WP Simple Galleries <= 1.34 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2023-46215
Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability
High
CVE-2023-46468
juzawebCMS Injection vulnerability
High
ghsa-7c2q-5qmr-v76q
DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998
Critical
Exploited in attacks
CVE-2023-46604
Apache ActiveMQ is vulnerable to Remote Code Execution
High
CVE-2023-5425
Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
High
CVE-2023-5426
Post Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletion
Critical
CVE-2023-5340
Five Star Restaurant Menu and Food Ordering <= 2.4.10 - Unauthenticated PHP Object Injection
Medium
CVE-2023-5343
Popup Box – Best WordPress Popup Plugin <= 3.7.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5609
Seraphinite Accelerator <= 2.20.28 - Reflected Cross-Site Scripting via 'rt'
Medium
CVE-2023-5610
Seraphinite Accelerator <= 2.20.28 - Arbitrary Redirect via 'redir'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.