High
CVE-2023-0264
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2022-2237
keycloak-connect contains Open redirect vulnerability in the Node.js adapter
Medium
CVE-2023-26486
Vega Expression Language `scale` expression function Cross Site Scripting
Medium
CVE-2023-26487
Vega has Cross-site Scripting vulnerability in `lassoAppend` function
Critical
CVE-2023-26475
xwiki-platform vulnerable to Remote Code Execution in Annotations
Medium
CVE-2022-38141
Sales Report Email for WooCommerce <= 2.8.0 - Missing Authorization for Email Functionality
Medium
CVE-2023-25491
JCH Optimize <= 3.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2022-47449
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD <= 3.1.5 - Reflected Cross-Site Scripting via cart_search
Medium
CVE-2023-27454
Rife Elementor Extensions & Templates <= 1.1.10 - Missing Authorization via import_templates
Medium
CVE-2023-23677
GTmetrix for WordPress <= 0.4.5 - Reflected Cross-Site Scripting via 'url'
Medium
c35bffb2-f805-48d6-938a-cb5142eac3b1
Fontiran <= 2.1 - Cross-Site Request Forgery
Medium
c0e58807-bccc-469f-82c3-a4bbf088a626
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-26525
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection
Medium
CVE-2022-46799
Easy Testimonial Slider and Form <= 1.0.15 - Unauthenticated Reflected Cross-Site Scripting via search_term
Medium
CVE-2023-24400
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_policy_link' Shortcodes
Medium
CVE-2023-1155
Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
701bf711-d692-4eb1-8459-befa62264b97
Fontiran <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-27451
Instant Images <= 5.1.0.1 - Authenticated (Author+) Server-Side Request Forgery via instant_images_download
Medium
CVE-2023-0085
Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass
Medium
CVE-2023-27443
Simple Vimeo Shortcode <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-47152
ClickFunnels <= 3.1.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-27447
WP SMS <= 6.0.4 - Information Disclosure via REST API
Medium
CVE-2023-27457
Add Expires Headers & Optimized Minify <= 2.7 - Cross-Site Request Forgery via [placeholder]
Medium
CVE-2023-27452
Button Generator – easily Button Builder <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.