Critical
CVE-2023-3077
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-2709
AN_GradeBook <= 5.0.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2967
TinyMCE Custom Styles <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-3325
CMS Commander <= 2.287 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature
Medium
CVE-2023-33213
wpView <= 1.3.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-35914
WooCommerce Subscriptions <= 5.1.2 - Missing Authorization to Insecure Direct Object Reference
Medium
CVE-2023-3320
WP Sticky Social <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-35880
WooCommerce Brands <= 1.6.49 - Cross-Site Request Forgery
Medium
CVE-2023-35878
Extra User Details <= 0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2029
PrePost SEO <= 3.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-35877
Extra User Details <= 0.5 - Cross-Site Request Forgery
Medium
CVE-2023-2964
Simple Iframe <= 1.1.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via block attributes
Critical
CVE-2023-3076
MStore API <= 3.9.8 - Unauthenticated Privilege Escalation
Medium
CVE-2023-1208
HTTP Headers <= 1.18.10 - Authenticated(Administrator+) Remote Code Execution
Medium
CVE-2023-2635
Call Now Accessibility Button <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23807
MojoPlug Slide Panel <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-35883
Core Web Vitals & PageSpeed Booster <= 1.0.12 - Open Redirect via _wp_http_referer
Medium
CVE-2023-3225
Float menu <= 5.0.2 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2529
Enable SVG Uploads <= 2.1.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2023-35882
Super Socializer <= 7.13.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-35875
Gutenverse <= 1.8.5 - Missing Authorization via 'data/update' API Endpoint
Medium
CVE-2023-1780
Companion Sitemap Generator <= 4.5.1.1 - Reflected Cross-Site Scripting
Critical
CVE-2022-47614
MStore API <= 3.9.7 - Unauthenticated SQL Injection
Medium
CVE-2023-2495
Greeklish-permalink <= 3.3 - Missing Authorization via cyrtrans_ajax_old AJAX action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.