High
CVE-2023-24187
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,598
Medium
CVE-2023-25572
Cross-Site-Scripting attack on `<RichTextField>`
High
ghsa-344m-qcjq-xgrf
Vulnerable OpenSSL included in sgx-dcap-quote-verify-python
Medium
CVE-2023-25697
GamiPress <= 2.5.6 - Cross-Site Request Forgery to User Earnings Deletion
Medium
CVE-2022-46805
Conditional Payments for WooCommerce <= 2.3.1 - Cross-Site Request Forgery
Medium
CVE-2023-25711
WPGlobus Translate Options <= 2.1.0 - Reflected Cross-Site Scripting via page
Medium
CVE-2023-23726
Tickera <= 3.5.1.0 - Cross-Site Request Forgery to Ticket Post Status Change
Medium
CVE-2023-25705
WP Prayer <= 1.9.6 - Authenticated(Admin+) Stored Cross-Site Scripting
High
CVE-2023-25714
Quick Paypal Payments <= 5.7.25 - Missing Authorization
High
CVE-2023-25713
Quick Paypal Payments <= 5.7.25 - Unauthenticated Stored Cross Site Scripting
Medium
CVE-2023-25712
Google Analytics Opt-Out <= 2.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-38468
NextGEN Gallery <= 3.28 - Cross-Site Request Forgery leading to Post Thumbnail Change
High
CVE-2022-47433
Multi Rating <= 5.0.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-46863
Quick Event Manager <= 9.6.4 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25709
Locatoraid Store Locator <= 3.9.11 - Cross Site Request Forgery in grab
Medium
75f0bc5a-f588-4aeb-9e55-72e180d39ddf
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Missing Authorization to Order Information Disclosure
Medium
5ebdf903-828e-4a22-953a-17d85984b576
AutomatorWP <= 2.5.8 - Cross Site Request Forgery via bulk_delete
Medium
CVE-2023-24399
Ocean Extra <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-25701
WatchTowerHQ <= 3.6.16 - Type Juggling to Authentication Bypass in check_ota
Medium
CVE-2022-46811
ALD Dropping and Fulfillment for AliExpress and WooCommerce <= 1.0.21 - Cross-Site Request Forgery to Order Information Disclosure
Medium
CVE-2023-0749
Ocean Extra <= 2.1.2 - Authenticated (Subscriber+) Arbitrary Post Access
Medium
CVE-2022-46806
Cart All In One For WooCommerce <= 1.1.10 - Cross-Site Request Forgery to Cart Changes
Critical
CVE-2023-24000
GamiPress <= 2.5.7 - Unauthenticated SQL Injection
Medium
CVE-2023-25708
WP VR <= 8.2.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.