Medium
CVE-2023-1913
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-29438
SimpleModal Contact Form (SMCF) <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-22711
IMPress Listings <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Listing Fields
High
CVE-2023-1912
Limit Login Attempts <= 1.7.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-29428
Superb Social Media Share Buttons and Follow Buttons <= 1.1.3 - Missing Authorization via spbsmAjax
Medium
CVE-2023-29425
ShiftController Employee Shift Scheduling <= 4.9.23 - Cross-Site Request Forgery via get
Medium
CVE-2023-1920
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callback'
High
CVE-2023-29424
ShiftController Employee Shift Scheduling <= 4.9.23 - Unauthenticated Stored Cross-Site Scripting via 'hc-title'
Medium
CVE-2023-1930
WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'
Medium
CVE-2023-1926
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'
Medium
CVE-2023-1931
WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'
Medium
CVE-2023-23701
Easy Sign Up <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-1375
WP Fastest Cache <= 1.1.2 - Missing Authorization to Cache Deletion
Medium
CVE-2023-29437
Connections Business Directory <= 10.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-26015
MapPress Maps for WordPress <= 2.85.4 - Authenticated (Contributor+) SQL Injection via get_maps
Medium
CVE-2023-1924
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'
Medium
CVE-2023-29429
User Registration <= 2.3.2.1 - Missing Authorization via send_test_email
Medium
CVE-2023-1922
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_pause_cdn_integration_ajax_request_callback'
Medium
CVE-2023-29433
tencentcloud-cos <= 1.0.7 - Missing Authorization via AJAX actions
High
CVE-2023-1874
WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2023-29427
Amelia <= 1.0.75 - Unauthenticated Reflected Cross-Site Scripting via 'code'
Medium
CVE-2023-29423
Cancel order request WooCommerce <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-29426
Spreadshop Plugin <= 1.6.5 - Cross-Site Request Forgery
Critical
CVE-2023-1405
Formidable Forms <= 6.1.2 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.