Critical
CVE-2023-33930
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
e743e656-2dd9-43ed-a190-b03af7c75c54
Abandoned Cart Lite for WooCommerce <= 5.14.1 - Cross-Site Request Forgery via ts_reset_tracking_setting
Medium
CVE-2023-33322
Front End Users <= 3.2.24 - Reflected Cross-Site Scripting
Medium
CVE-2023-33312
Easy Captcha <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-2742
AI ChatBot <= 4.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-2719
SupportCandy <= 3.1.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-33325
Leyka <= 3.30.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-2518
Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-32800
Rank Math SEO PRO <= 3.0.35 - Reflected Cross-Site Scripting
Medium
CVE-2023-33314
BEAR <= 1.1.3.1 - Cross-Site Request Forgery via Multiple Functions
Medium
a1e51a99-f5d4-47d4-bead-00ca1f5f72c2
Abandoned Cart Lite for WooCommerce <= 5.14.1 - Cross-Site Request Forgery via delete_expired_used_coupon_code
Critical
CVE-2023-33318
WooCommerce Follow-Up Emails <= 4.9.40 - Authenticated Arbitrary File Upload in Template Editing
Critical
CVE-2023-31090
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.60 - Arbitrary File Upload in File Manager
High
CVE-2023-33324
Easy Captcha <= 1.0 - Missing Authorization via easy_captcha_update_settings
Medium
CVE-2023-2398
Icegram Engage <= 3.1.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-2362
Multiple Wow-Company Plugins (Various Versions) -- Reflected Cross-Site Scripting via 'page' parameter
Medium
CVE-2023-33328
MailChimp Subscribe Forms <= 4.0.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-2805
SupportCandy <= 3.1.6 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-32958
Novelist <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Book Information Fields
Medium
CVE-2023-33211
WP-Piwik <= 1.0.27 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Display Name
Medium
CVE-2023-33320
WP-Hijri <= 1.5.1 - Reflected Cross-Site Scripting
Critical
CVE-2023-2734
MStore API <= 3.9.1 - Authentication Bypass
Medium
CVE-2023-33922
Elementor <= 3.13.2 Authenticated(Contributor+) Arbitrary Post Type Creation via save_item
Medium
CVE-2023-33311
Contact Form Entries <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via vx-entries shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.