Medium
CVE-2023-2627
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-2592
FormCraft Premium <= 3.9.6 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-2482
Responsive CSS EDITOR <= 1.0 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-2628
KiviCare – Clinic & Patient Management System (EHR) <= 3.2.0 - Cross-Site Request Forgery
Medium
CVE-2023-1166
USM Premium <= 16.2 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2623
KiviCare – Clinic & Patient Management System (EHR) <= 3.2.0 - Sensitive Information Exposure
Medium
CVE-2023-2711
Ultimate Product Catalog <= 5.2.5 - Authenticated(Administrator+) Stored Cross-Site Scripting
High
CVE-2023-2744
WP ERP <= 1.12.3 - Authenticated (Administrator+) SQL Injection via 'type'
Medium
CVE-2023-2178
Aajoda Testimonials <= 2.2.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25453
WordPress Tables <= 1.3.9 - Reflected Cross-Site Scripting via error_msg
Medium
CVE-2023-3095
TeamPass vulnerable to Improper Access Control
High
CVE-2023-2546
WP User Switch <= 1.0.2 - Authenticated (Subscriber+) Authentication Bypass via Cookie
Critical
CVE-2023-3086
TeamPass vulnerable to stored Cross-site Scripting
High
CVE-2023-3084
TeamPass vulnerable to stored Cross-site Scripting
High
CVE-2023-3083
TeamPass vulnerable to stored Cross-site Scripting
Medium
CVE-2023-34384
Kebo Twitter Feed <= 1.5.12 - Cross-Site Request Forgery via kebo_twitter_menu_render
Medium
CVE-2023-34376
Change WooCommerce Add To Cart Button Text <= 1.3 - Missing Authorization via rexvs_settings_submit
Medium
CVE-2023-3126
B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Information Disclosure
Medium
CVE-2023-3125
B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Price Modification
Medium
CVE-2023-34387
Constant Contact Forms <= 1.14.0 - Missing Authorization via constant_contact_optin_ajax_handler
Medium
CVE-2023-34386
WPC Smart Wishlist for WooCommerce <= 4.7.1 - Cross-Site Request Forgery via wishlist_add and wishlist_remove
High
CVE-2023-34379
Cart2Cart: Magento to WooCommerce Migration <= 2.0.0 - Missing Authorization via setToken
Medium
CVE-2023-35046
Dynamic Visibility for Elementor <= 5.0.5 - Missing Authorization to Authenticated(Subscriber+) Post Visibility Modification
Medium
CVE-2023-34378
WP Hide Post <= 2.0.10 - Cross-Site Request Forgery via save_bulk_edit_data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.