High
CVE-2023-25575
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-26105
mde utilities contains Prototype Pollution
Medium
CVE-2023-1081
Microweber Cross-site Scripting vulnerability
Medium
CVE-2023-0272
NEX-Forms - Ultimate Form Builder <= 8.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-1092
OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1 - Cross-Site Request Forgery via 'delete' in mooauth_client_applist_page
Medium
CVE-2023-0502
WP News <= 1.1.9 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26527
Debug Assistant <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0484
Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks <= 1.1.5 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26522
WP Repost <= 0.1 - Missing Authorization
Medium
CVE-2023-25470
Rus-To-Lat <= 0.3 - Cross-Site Request Forgery to Plugins Options Changes
Medium
CVE-2023-1025
Simple File List <= 6.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0336
OoohBoi Steroids for Elementor <= 2.1.3 - Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion
Medium
CVE-2023-26537
WP No External Links <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scritping
Medium
CVE-2023-0499
QuickSwish <= 1.0.9 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26514
XML Sitemap Generator for Google <= 1.3.3 - Cross-Site Request Forgery to Plugin Settings Changes
Medium
CVE-2023-0500
WP Film Studio <= 1.3.4 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-25475
Smart YouTube PRO <= 4.3 - Cross-Site Request Forgery via handle_colorbox_options
Medium
CVE-2023-26524
Quiz And Survey Master <= 8.0.10 - Cross-Site Request Forgery to Quiz Restoration
Medium
CVE-2023-26523
Calculated Fields Form <= 1.1.120 - Cross-Site Request Forgery
Medium
CVE-2023-0498
WP Education <= 1.2.6 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-0335
WP Shamsi <= 4.3.3 - Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion
Medium
CVE-2023-0496
HT Event <= 1.4.5 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2023-0495
HT Slider For Elementor <= 1.3.9 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-25029
WP Social Bookmarking Light <= 2.0.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.