Critical
CVE-2022-47586
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-27923
VK Blocks <= 1.53.0.1 - Stored (Contributor+) Cross-Site Scripting in Tag Edit
Medium
CVE-2023-24409
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting
Medium
CVE-2023-2399
QuBotChat <= 1.1.5 - Unauthenticated Self-Based Cross-Site Scripting
High
CVE-2023-32121
Zero Spam <= 5.4.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-32126
SALERT <= 1.2.1 - Missing Authorization via salert_save_settings_with_ajax()
Medium
CVE-2023-28775
Yoast SEO Premium <= 20.4 - Missing Authorization to Zapier Key Reset
Medium
CVE-2023-29099
Divi <= 4.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-32502
Pro Mime Types <= 1.0.7 - Cross-Site Request Forgery
Medium
CVE-2023-32300
Yoast SEO: Local <= 14.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-32503
GTmetrix for WordPress <= 0.4.6 - Reflected Cross-Site Scripting via 'report_id' and 'event_id'
Medium
CVE-2023-28780
Yoast SEO: Local <= 14.8 - Cross-Site Request Forgery
Medium
CVE-2023-32498
Easy Form by AYS <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32505
Easy Hide Login <= 1.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
6a830fb8-de5f-40c7-bb6c-464ed916b440
My WP Customize Admin/Frontend <= 1.21.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-23880
ExactMetrics <= 7.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-32118
SALERT <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-32516
Menu - Ordering - Reservations <= 2.3.6 - Reflected Cross-Site Scripting via 'redirect'
Medium
CVE-2023-24413
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
Medium
CVE-2023-31075
Easy Hide Login <= 1.0.8 - Cross-Site Request Forgery
Medium
CVE-2023-27926
VK All in One Expansion Unit <= 9.88.1.0 - Stored (Contributor+) Cross-Site Scripting in Profile Setting
Medium
CVE-2023-32496
StopBadBots <= 7.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32499
Radio Station <= 2.4.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-32504
Wise Chat <= 3.1.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.