Medium
CVE-2023-41870
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-41868
Stagtools <= 2.3.7 - Reflected Cross-Site Scripting
High
CVE-2023-41863
PeproDev CF7 Database <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting via form submission
Medium
CVE-2023-41697
Easy WP Cleaner <= 1.9 - Cross-Site Request Forgery
Critical
CVE-2023-40555
Flatsome <= 3.17.5 - Unauthenticated PHP Object Injection
Medium
CVE-2023-41853
WP iCal Availability <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-4773
WordPress Social Login <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-41869
WP Accessibility Helper (WAH) <= 0.6.2.4 - Missing Authorization via AJAX action
Medium
b7e417c2-bf9c-4c88-be2b-9c2324897b07
Laposta Signup Basic <= 1.4.1 - Missing Authorization
Medium
CVE-2023-41851
WP Custom Post Template <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-41856
Click To Tweet <= 2.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2023-41801
AWP Classifieds <= 4.3 - Cross-Site Request Forgery
Low
CVE-2023-41798
Directorist <= 7.7.1 - CSV Injection
Medium
CVE-2023-41867
AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-41695
Analytify Dashboard <= 5.1.0 - Missing Authorization to Opt-In
Medium
CVE-2023-41850
Outbound Link Manager <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-41857
Click To Tweet <= 2.0.14 - Missing Authorization
Medium
CVE-2023-41735
Email posts to subscribers <= 6.2 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-41858
Order Delivery Date for WP e-Commerce <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-41731
wordpress publish post email notification <= 1.0.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41872
WoodMart <= 7.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-41804
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2023-41728
Rescue Shortcodes <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-41691
WooCommerce PensoPay <= 6.3.1 - Reflected Cross-Site Scripting via 'pensopay_action'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.