High
CVE-2023-1406
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-28660
Events Made Easy <= 2.3.17 - Authenticated (Subscriber+) SQL Injection via 'search_name'
Medium
CVE-2023-23664
ConvertBox Auto Embed WordPress plugin <= 1.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-28422
Event Manager for WooCommerce <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mep_get_option' function
Medium
CVE-2023-28620
Cyberus Key <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'uid' in 'cyberkey_settings' Plugin Setting
Medium
CVE-2023-23897
Simple Mobile URL Redirect <= 1.7.2 - Cross-Site Request Forgery leading to Mobile Redirect Updates
Medium
bb74a917-2dfb-4229-a72a-9c3d1f9a6324
GamiPress – Youtube integration <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23869
Google XML Sitemap for Mobile <= 1.6.1 - Cross-Site Request Forgery via mobile_sitemap_generate
Medium
CVE-2023-0423
WordPress Amazon S3 Plugin <= 1.5 - Reflected Cross-Site Scripting
High
CVE-2023-28661
WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection via 'value'
Medium
CVE-2023-0157
All-In-One Security (AIOS) <= 5.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23883
WP Content Filter – Censor All Offensive Content From Your Site <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1121
Simple Giveaways <= 2.45.0 - Authenticated(Admin+) Stored Cross-Site Scripting via form fields
Medium
CVE-2023-1120
Simple Giveaways <= 2.45.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings
High
CVE-2023-1425
Groundhogg <= 2.7.9.3 - Authenticated (Administrator)+ SQL Injection
Medium
CVE-2023-0363
Scheduled Announcements Widget <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-28664
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name'
Medium
CVE-2023-28666
InPost Gallery <= 2.1.4.1 - Reflected Cross-Site Scripting via 'imgurl'
High
CVE-2023-0983
Stylish Cost Calculator < 7.9.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-28536
Branded Social Images <= 1.1.0 - Missing Authorization leading to Unauthenticated Plugin Settings Updates
Medium
CVE-2023-0874
Klaviyo <= 3.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-1473
Slider, Gallery, and Carousel by MetaSlider <= 3.29.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-1122
Simple Giveaways <= 2.45.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Form, Prize, and Sharing Method Fields
Medium
CVE-2023-27618
Store Locator WordPress <= 1.4.9 - Authenticated (Editor+) Stored Cross-Site Scripting via 'category_name', 'description', 'description_2' parameters
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.