Unrated
786
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2021-31635
jFinal Server-Side Template Injection vulnerability
High
CVE-2023-3041
Autochat Automatic Conversation <= 1.1.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-34013
Poll Maker <= 4.6.2 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2023-2329
WooCommerce Google Sheet Connector < 1.3.6 - Cross-Site Request Forgery
Medium
CVE-2023-36511
WooCommerce Order Barcodes <= 1.6.4 - Cross-Site Request Forgery
Medium
CVE-2023-36512
AutomateWoo <= 5.7.5 - Missing Authorization
Medium
CVE-2023-1893
Login Configurator <= 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-1844
Subscribe2 <= 10.40 - Missing Authorization
Medium
CVE-2023-3371
EmbedPress <= 3.7.3 - Sensitive Information Exposure
Medium
CVE-2023-36514
WooCommerce Ship to Multiple Addresses <= 3.8.5 - Cross-Site Request Forgery
Medium
CVE-2023-2330
Caldera Forms Google Sheets Connector <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2023-3412
Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite <= 1.0.0 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2023-3178
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Arbitrary Log Deletion
Medium
CVE-2023-24391
ApplyOnline – Application Form Builder and Manager <= 2.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36513
AutomateWoo <= 5.7.5 - Cross-Site Request Forgery
Medium
CVE-2023-0439
NEX-Forms - Ultimate Form Builder <= 8.4.3 - Authenticated Stored Cross-Site Scripting via Form Name
Medium
CVE-2023-3407
Subscribe2 <= 10.40 - Cross-Site Request Forgery
Medium
7f73d0a6-2eae-4d85-96ce-db5902bd6e3a
WooCommerce Pre-Orders <= 2.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-3179
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Account Compromise
Medium
CVE-2023-3411
Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2023-2636
AN_GradeBook <= 5.0.1 - Authenticated (Subscriber+) SQL Injection via 'id'
Medium
3fa62b8f-1c2f-4bc9-9f2a-8b9765c2d30d
Login/Signup Popup <= 2.3 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2023-3245
Floating Chat Widget - Chaty <= 3.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.