Medium
CVE-2023-23832
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-25794
Nooz <= 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25782
Service Area Postcode Checker <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-40198
TeraWallet – For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via admin_options
Medium
CVE-2023-23710
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-25792
WP Open Social <= 5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23889
Quick Paypal Payments <= 5.7.25 - Authenticated (Contributor+) Cross Site Scripting
Medium
CVE-2023-25481
Podlove Subscribe button <= 1.3.7 - Cross-Site Request Forgery via save function
Medium
CVE-2023-25787
WP资源下载管理 <= 1.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25789
Tapfiliate <= 3.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25485
JSON Content Importer <= 1.3.15 - Authenticated (Admin+) Cross Site Scripting
Medium
CVE-2023-1093
OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1- Cross-Site Request Forgery via 'discard' in mooauth_client_applist_page
Medium
CVE-2023-25783
Peadig's Like & Share Button <= 1.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-24005
Inline Tweet Sharer <= 2.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25785
WP Post Rating <= 2.4.6 - Missing Authorization to Vote Manipulation
Medium
934b2767-eae4-4c2d-a635-2e6a27fd9f49
Get URL Cron <= 1.4.7 - Cross-Site Request Forgery via geturlcron_action_handle
Medium
CVE-2023-25710
Click to Call or Chat Buttons <= 1.4.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25795
Feed Changer <= 0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25490
Archivist – Custom Archive Templates <= 1.7.4 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23724
WordPress Email Marketing Plugin – WP Email Capture <= 3.9.3 - Cross Site Request Forgery
Medium
CVE-2022-47608
Quick Contact Form <= 8.0.3.1 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-25479
Podlove Subscribe button <= 1.3.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25786
Eyes Only: User Access Shortcode <= 1.8.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23799
Easy Panorama <= 1.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.