Medium
CVE-2023-45836
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-5576
Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure
Medium
CVE-2023-45831
AMP WP <= 1.5.15 - Cross-Site Request Forgery via multiple settings pages
High
CVE-2023-45830
Accessibility Suite by Online ADA <= 4.12 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-45837
Ultimate Taxonomy Manager <= 2.0 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-45755
BuddyPress Global Search <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-45771
Contact Form With Captcha <= 1.6.8 - Cross-Site Request Forgery
Medium
CVE-2023-45748
MailChimp Forms by MailMunch <= 3.1.7 - Cross-Site Request Forgery via Multiple AJAX actions
Medium
CVE-2023-45651
WP Attachments <= 5.0.11 - Cross-Site Request Forgery
Medium
CVE-2023-45772
Proofreading <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-39924
Simple File List <= 6.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-45658
Nexter <= 2.0.3 - Missing Authorization
Medium
CVE-2023-25032
Print, PDF, Email by PrintFriendly <= 5.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-45767
Simple Tweet <= 1.4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-45653
Video Playlist For YouTube <= 6.1 - Cross-Site Request Forgery
Medium
CVE-2023-45655
PixFields <= 0.7.0 - Cross-Site Request Forgery
Medium
CVE-2023-45640
WP ULike <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-4995
Embed Calendly <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-45652
Remote Content Shortcode <= 1.5 - Authenticated(Contributor+) Local File Inclusion via shortcode
Medium
CVE-2023-45770
Fast WP Speed <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-45768
Next Page <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
bdc84664-2a04-4cc6-ac3f-48bfd432691f
WordPress Core 4.7.0-6.3.1 - Denial of Service via Cache Poisoning
Medium
af77d642-d383-48f2-a59a-3a9c738cd47f
WordPress Core 6.3 - 6.3.1 - Authenticated(Contributor+) Cross-Site Scripting via Footnotes Block
Medium
CVE-2023-45749
AGP Font Awesome Collection <= 3.2.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.