Medium
CVE-2023-0749
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-46806
Cart All In One For WooCommerce <= 1.1.10 - Cross-Site Request Forgery to Cart Changes
Critical
CVE-2023-24000
GamiPress <= 2.5.7 - Unauthenticated SQL Injection
Medium
CVE-2023-25708
WP VR <= 8.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-25704
Interactive SVG Image Map Builder <= 1.0 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25706
Robots.txt optimization <= 1.4.5 - Cross Site Request Forgery
Medium
CVE-2023-0156
All-In-One Security (AIOS) <= 5.1.4 - Authenticated(Admin+) Directory Traversal
Critical
CVE-2023-24188
Arbitrary file deletion in ureport
High
CVE-2023-25240
SameSite Attribute vulnerability in pimCore
Medium
CVE-2023-25727
Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin
Medium
CVE-2022-25937
Path traversal vulnerability in glance
Medium
CVE-2023-0063
WordPress Shortcodes <= 1.6.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-25484
Simple Yearly Archive <= 2.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-2297
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism
Low
CVE-2023-26529
DupeOff <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0065
i2 Pros & Cons <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0069
WPaudio MP3 Player <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0165
Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
CVE-2023-0814
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode
Medium
CVE-2023-0068
Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4328
WooCommerce Checkout Field Manager <= 17.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-0076
Download Attachments <= 1.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23685
Portfolio – WordPress Portfolio Plugin <= 2.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0094
UpQode Google Maps <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.