Medium
CVE-2023-5752
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-46136
Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
High
CVE-2023-46128
Nautobot vulnerable to exposure of hashed user passwords via REST API
Medium
CVE-2023-46634
Custom My Account for Woocommerce <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-46633
Glossary <= 3.1.2 - Missing Authorization
High
f1cbe675-4c0f-430a-b2db-85ba8605d172
Deeper Comments <= 2.1.1 - Missing Authorization to Authenticated(Subscriber+) Arbitrary Options Update
Medium
CVE-2023-46631
Product Recommendation Quiz for eCommerce <= 2.1.0 - Missing Authorization in prq_set_token
Medium
CVE-2023-40681
Groundhogg <= 2.7.11.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via Task Data
Medium
CVE-2023-46618
Category SEO Meta Tags <= 2.5 - Cross-Site Request Forgery via csmt_admin_options
Medium
CVE-2023-46638
WCP OpenWeather <= 2.5.0 - Cross-Site Request Forgery
Medium
d3343d96-ca52-46a6-b464-cd2e5375d10f
Fathom Analytics <= 3.0.7 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46622
WPPizza <= 3.18.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-32298
Simple User Listing <= 1.9.2 - Reflected Cross-Site Scripting via as
Medium
CVE-2023-46620
DeepL Pro API translation <= 2.4.1.1 - Cross-Site Request Forgery via wpdeepl_prune_logs
Medium
CVE-2023-46626
FLOWFACT WP Connector <= 2.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-47230
Contact Forms by Cimatti <= 1.6.0 - Cross-Site Request Forgery via accua_forms_list_page_table
Medium
CVE-2023-46619
Spider Facebook <= 1.0.15 - Cross-Site Request Forgery
Medium
CVE-2023-46644
WordPress CTA <= 1.5.8 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-46624
Parcel Pro <= 1.6.11 - Open Redirect via 'redirect'
Medium
CVE-2023-5314
WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending
Medium
CVE-2023-46635
YITH WooCommerce Product Add-Ons <= 4.2.0 - Missing Authorization
Medium
CVE-2023-32299
Ni WooCommerce Sales Report <= 3.7.3 - Missing Authorization via ajax_sales_order
Medium
CVE-2023-46632
My Shortcodes <= 2.3 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-31077
Export WP Page to Static HTML/CSS <= 2.1.9 - Cross-Site Request Forgery via Multiple AJAX Actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.