Medium
CVE-2023-22683
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-25978
Protected Posts Logout Button <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-47143
Multiple Page Generator Plugin <= 3.3.9 - Cross-Site Request Forgery
Critical
CVE-2023-0037
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection via Multiple Parameters
Medium
CVE-2023-23809
Stock market charts from finviz <= 1.0.1 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
5c7edfad-b45b-4297-876d-a063e02af0bf
Top 10 – Popular posts plugin for WordPress <= 3.2.3 - Cross-Site Request Forgery via tptn_ajax_clearcache
Medium
CVE-2022-46851
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 3.1.20 - Cross-Site Request Forgery in add_to_favorite
Medium
CVE-2023-23820
ProfilePress <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23785
Exquisite PayPal Donation <= v2.0.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4652
Video Background <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23816
Sitemap Index <= 1.2.3 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23887
Easy Google Analytics for WordPress <= 1.6.0 - Cross-Site Request Forgery
Medium
37b5fcfd-654b-4151-9494-551799464c7c
Contextual Related Posts <= 3.3.1 - Missing Authorization in crp_ajax_clearcache
High
CVE-2023-26326
BuddyForms <= 2.7.7 - PHAR Deserialization
Critical
CVE-2023-25699
Live Streaming - Broadcast Live Video <= 5.5.15 - Missing Authorization to Unauthenticated Remote Code Execution
Medium
CVE-2022-47422
Accept Stripe Donation – AidWP <= 3.1.5 - Cross Site Request Forgery
Medium
CVE-2023-23806
WordPress Custom Settings <= 1.0 - Authenticated(Admin+) Stored Cross-Site Scripting
High
CVE-2023-25986
PayGreen – Ancienne version <= 4.10.2 - Cross-Site Request Forgery
Medium
CVE-2022-38063
Social Login WP <= 5.0.0.0 - Cross-Site Request Forgery
Medium
CVE-2023-25993
Top 10 – Popular posts plugin for WordPress <= 3.2.3 - Missing Authorization on tptn_ajax_clearcache
Low
CVE-2023-23814
CP Multi View Event Calendar <= 1.4.13 - Insufficient Authorization
Critical
CVE-2014-125087
java-xmlbuilder vulnerable to XML External Entity Reference
Medium
CVE-2023-0914
Pixelfed may allow unauthorized actor to view private posts
Medium
CVE-2023-0901
Pixelfed allows user enumeration via reset password functionality
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.