Medium
CVE-2023-3011
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-28934
WP Full Stripe Free <= 7.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-37387
Classified Listing <= 2.4.5 - Cross-Site Request Forgery via rtcl_ajax_thumbnail_delete
Medium
CVE-2023-37392
WP Dummy Content Generator <= 2.3.0 - Cross-Site Request Forgery
Medium
CVE-2023-2974
quarkus-core vulnerable to client driven TLS cipher downgrading
Medium
CVE-2023-1119
WP-Optimize <= 3.2.12 & SrbTransLatin <= 2.4 - Stored/Reflected Cross-Site Scripting via Third Party Library
High
CVE-2023-36515
LearnPress <= 4.2.3 - Missing Authorization to Information Exposure
Medium
CVE-2023-36516
LearnPress <= 4.2.3 - Missing Authorization
Medium
CVE-2023-24393
Animated Number Counters <= 1.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-36681
Cryptocurrency Widgets – Price Ticker & Coins List <= 2.6.2 - Missing Authorization
Medium
CVE-2023-36694
Kingkong Board <= 2.1.0.2 - Missing Authorization
Medium
CVE-2023-36680
Image Regenerate & Select Crop <= 7.1.0 - Missing Authorization
Medium
CVE-2023-36687
Menubar <= 5.8.2 - Cross-Site Request Forgery in wpm-admin.php
Medium
CVE-2023-36688
Simple Site Verify <= 1.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36693
WP RSS Images <= 1.1 - Cross-Site Request Forgery
Critical
CVE-2023-3342
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2023-24401
Mobile Call Now & Map Buttons < 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36678
WP Content Copy Protection & No Right Click <= 3.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-31230
Baidu Tongji generator <= 1.0.2 - Cross-Site Request Forgery
Medium
CVE-2023-24397
Reservation.Studio widget <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23893
Simple Giveaways <= 2.46.0 - Missing Authorization via AJAX actions
Medium
CVE-2023-39989
Header Footer Code Manager <= 1.1.34 - Cross-Site Request Forgery via process_bulk_action
Medium
CVE-2023-36695
Sublanguage <= 2.9 - Missing Authorization
Medium
CVE-2023-36692
WP-Cirrus <= 0.6.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.