Medium
CVE-2023-26518
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-0505
Ever Compare <= 1.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-1088
WP Plugin Manager <= 1.1.7 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-0504
HT Politic <= 2.3.7 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2023-0497
HT Portfolio <= 1.1.5 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-1087
WC Sales Notification <= 1.2.2 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26534
WP Repost <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scritping
High
CVE-2023-26516
Debug Assistant <= 1.4 - Cross-Site Request Forgery via imlt_create_admin
Medium
CVE-2023-26520
Advanced Text Widget <= 2.1.2 - Missing Authorization via atw_dismiss_admin_notice
Medium
CVE-2023-0501
WP Insurance – WordPress Insurance Service Plugin <= 2.1.3 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2023-0503
Free WooCommerce Theme 99fy Extension <= 1.2.7 - Cross-Site Request Forgery leading to Arbitrary Plugin Activation
Medium
CVE-2023-1086
Preview Link Generator <= 1.0.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-26521
Search in Place <= 1.0.104 - Cross-Site Request Forgery to Feedback Submission
Medium
CVE-2023-26539
Advanced Text Widget <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
157b3095-b662-465e-a975-5b71b5d4ba2a
Real Estate 7 <= 3.3.4 - Reflected Cross-Site Scripting via ct_additional_features
High
CVE-2023-0631
Paid Memberships Pro <= 2.9.11 - Authenticated (Subscriber+) SQL Injection via Shortcodes
Medium
CVE-2023-26532
Social Auto Poster <= 2.1.4 - Cross-Site Request Forgery to Plugin Settings Reset
Medium
CVE-2022-41790
WP Time Slots Booking Form <= 1.1.76 - Missing Authorization to Feedback Submission
Medium
CVE-2023-0660
Smart Slider 3 <= 3.5.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-24249
laravel-admin has Arbitrary File Upload vulnerability
High
CVE-2023-26043
GeoServer style upload functionality vulnerable to XML External Entity (XXE) injection
High
CVE-2023-1070
TeamPass External Control of File Name or Path vulnerability
Medium
CVE-2023-1067
Pimcore vulnerable to Cross-site Scripting
Medium
CVE-2022-34344
Wholesale Suite <= 2.1.5 - Missing Authorization to Plugin Settings Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.