Medium
CVE-2023-0772
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-27436
Elegant Custom Fonts <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-27439
New Adman <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27434
Classic Editor and Classic Widgets <= 1.2.5 - Cross-Site Request Forgery via render_settings_page
Medium
CVE-2023-27441
New Adman <= 1.6.8 - Cross-Site Request Forgery via plugin_menu
Medium
CVE-2022-40699
Yet Another Stars Rating <= 3.1.2 - Authenticated (Subscriber+) Cross-Site Scripting via Shortcodes
Medium
CVE-2023-27438
WP Translitera <= p1.2.5 - Cross-Site Request Forgery
Medium
CVE-2023-27442
Leyka <= 3.29.2 - Cross-Site Request Forgery
Medium
CVE-2023-25451
CPO Content Types <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-27432
Manage Upload Limit <= 1.0.4 - Reflected Cross-Site Scripting via upload_limit
Medium
CVE-2023-25034
WP Clean Up <= 1.2.3 - Cross-Site Request Forgery via wp_clean_up_optimize
Medium
CVE-2023-25021
FareHarbor for WordPress <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
CVE-2023-0219
FluentSMTP <= 2.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Email Logs
Medium
CVE-2023-0844
Namaste! LMS <= 2.5.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'accept_other_payment_methods', 'other_payment_methods' Parameters
Medium
CVE-2023-27449
Total Poll Lite <= 4.8.6 - Cross-Site Request Forgery
Medium
CVE-2023-25467
Resize at Upload Plus <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2023-0968
Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-25474
About Me 3000 widget <= 2.2.6 - Cross-Site Request Forgery to Plugin Settings Update
High
CVE-2023-27450
Leyka <= 3.29.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-27445
Blog Floating Button <= 1.4.12 - Cross-Site Request Forgery
Medium
2b335807-f4d1-43b3-9e1b-2215eb00a3f8
WP Meteor Page Speed Optimization Topping <= 3.1.4 -Missing Authorization to Notice Dismissal
Medium
CVE-2023-0491
Schedulicity - Easy Online Scheduling <= 2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-27440
Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload
Medium
ghsa-cp47-r258-q626
Vega vulnerable to arbitrary code execution when clicking href links
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.