Medium
CVE-2023-41737
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2023-25054
RSVPMaker <= 10.6.6 - Unauthenticated PHP Object Injection
Medium
CVE-2023-41861
Restrict <= 2.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-41875
WP Directory Kit <= 1.2.6 - Missing Authorization
Medium
CVE-2023-41729
SendPress Newsletters <= 1.23.11.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41848
Carousel Slider <= 2.2.2 - Missing Authorization
Medium
CVE-2023-32091
POEditor <= 0.9.4 - Cross-Site Request Forgery
Medium
4c0cbf44-f6b4-408d-9a96-98f45d890822
Laposta Signup Embed <= 1.1.0 - Cross-Site Request Forgery
Medium
CVE-2023-41854
wpCentral <= 1.5.7 - Cross-Site Request Forgery
Medium
CVE-2023-41948
Cookie Notice & Consent 1.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41876
WP Gallery Metabox <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2023-41734
Insert Estimated Reading Time <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-41860
Travel Map <= 1.0.1 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-41732
CP Blocks <= 1.0.20 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-41796
Sunshine Photo Cart <= 2.9.25 - Insecure Direct Object Reference to Order Manipulation
Medium
CVE-2023-41800
UniConsent Cookie Consent CMP for GDPR / CCPA <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
12b81441-d22c-4211-a8da-811182de622d
Laposta Signup Embed <= 1.1.0 - Missing Authorization
Medium
CVE-2023-4482
Auto Amazon Links <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via style
Medium
CVE-2023-41802
Super Socializer <= 7.13.54 - Cross-Site Request Forgery
Medium
CVE-2023-41866
Automatic YouTube Gallery <= 2.3.3 - Missing Authorization via AJAX actions
Critical
CVE-2023-4634
Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution
Medium
00274313-9079-4877-b72e-310e312aa814
Backup Migration <= 1.2.9 - Cross-Site Request Forgery
High
CVE-2023-41058
Trigger `beforeFind` not invoked in internal query pipeline when fetching pointer
Medium
CVE-2023-41052
incorrect order of evaluation of side effects for some builtins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.