High
CVE-2023-26152
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-45067
WP Simple HTML Sitemap <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-30870
Sharkdropship for AliExpress Dropship and Affiliate <= 2.2.4 - Missing Authorization
Medium
CVE-2023-45057
Hitsteps Web Analytics <= 5.86 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-45003
Social Feed <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-45006
WooODT Lite <= 2.4.6 - Reflected Cross-Site Scripting
High
CVE-2023-28748
Copy Or Move Comments <= 5.0.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-45064
OPcache Dashboard <= 0.3.1 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2023-45059
Gumroad <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
c49b3841-370b-42ed-9545-e69c2544642d
Marker.io <= 1.1.6 - Cross-Site Request Forgery
High
CVE-2023-45046
Pressference Exporter <= 1.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-44998
Category Meta <= 1.2.8 - Cross-Site Request Forgery
Medium
CVE-2023-44993
ChatBot <= 4.7.8 - Cross-Site Request Forgery via qc_wp_latest_update_check
Medium
CVE-2023-45008
Comment Reply Email <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5291
Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-45055
MStore API <= 4.0.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-44995
WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery
Medium
CVE-2023-45011
WP Power Stats <= 2.2.3 - Cross-Site Request Forgery
High
CVE-2023-45069
Video Gallery – YouTube Gallery <= 2.1.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-3213
WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page
Medium
CVE-2023-39920
Redirection for Contact Form 7 <= 2.9.2 - Missing Authorization
Medium
CVE-2023-45058
Short URL <= 1.6.8 - Cross-Site Request Forgery
Medium
CVE-2023-45072
Order auto complete for WooCommerce <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-45005
Seriously Simple Stats <= 1.5.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.