High
CVE-2023-2736
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-2580
AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable <= 1.6.82 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
6300c8c2-f539-46b2-9ee0-80bebbe4cad3
WordPress Core < 6.2.1 - Shortcode Execution in User Generated Content
Medium
4e3a6fe2-6292-44ff-8925-a4aeb77c2a7f
WordPress Core < 6.2.2 - Shortcode Execution in User Generated Content
Medium
CVE-2023-2735
Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2716
Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Upload
Medium
CVE-2023-2714
Groundhogg <= 2.7.9.8 - Missing Authorization to Update License
Medium
CVE-2023-2715
Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation
Medium
CVE-2023-33216
WooDiscuz – WooCommerce Comments <= 2.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2800
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.
Medium
CVE-2023-30124
LavaLite vulnerable to Cross Site Scripting
Medium
CVE-2023-33210
nuajik CDN <= 0.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
CVE-2023-31233
Baidu Tongji generator <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-24390
WeSecur Security <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-33209
SEO Change Monitor <= 1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-32965
Jazz Popups <= 1.8.7 - Reflected Cross-Site Scripting via 'wpjazzpopup_switchonoff'
Medium
CVE-2023-32962
WishSuite <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-31236
Scripts n Styles <= 3.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-33207
Stop Referrer Spam <= 1.3.0 - Cross-Site Request Forgery via processParameters
Medium
CVE-2023-32963
WooCommerce Predictive Search <= 5.8.0 - Cross-Site Request Forgery via multiple AJAX actions
Medium
CVE-2023-32964
Better Notifications for WP <= 1.9.2 - Cross-Site Request Forgery via handle_actions
Medium
CVE-2023-25462
WP htaccess Control <= 3.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32966
Jazz Popups <= 1.8.7 - Cross-Site Request Forgery
Medium
CVE-2023-32960
UpdraftPlus <= 1.23.3 - Cross-Site Request Forgery to Cross-Site Scripting via action_authenticate_storage
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.