Medium
c3190f9f-8b2f-4251-8804-f386e2c5678f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-25035
Quick Contact Form <= 8.0.3.1 - Cross-Site Request Forgery to Sensitive Information Disclosure
Medium
CVE-2023-25026
PayPal Brasil para WooCommerce <= 1.4.2 - Cross-Site Request Forgery
Medium
CVE-2023-25031
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-46797
All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 5.2.3 - Cross-Site Request Forgery
Medium
CVE-2022-45810
Icegram Express <= 5.5.2 - Unauthenticated CSV Injection
Medium
CVE-2023-25039
Google Maps CP <= 1.0.43 - Missing Authorization to Authenticated (Subscriber+) Feedback Form Submission
Medium
CVE-2023-0376
Quebely <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Option
Medium
CVE-2023-23868
Cost of Goods for WooCommerce <= 2.8.6 - Missing Authorization in save_costs
Medium
CVE-2023-25024
Icegram Collect <= 1.3.8 - Authenticated(Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2023-23885
Quick Contact Form <= 8.0.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0552
Pie Register <= 3.8.2.2 - Open Redirect
Medium
CVE-2022-45840
Auto Affiliate Links <= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change
Medium
CVE-2023-25027
Chained Quiz <= 1.3.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-25041
Monolit <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-38456
Ajax Search Lite <= 4.10.3 - Missing Authorization leading to Authenticated (Subscriber+) Sensitive Information Disclosure
Medium
CVE-2022-45803
Gutenberg Forms <= 2.2.8.3 - Authenticated(Subscriber+) Sensitive Information Disclosure
High
CVE-2023-23990
Redirection for Contact Form 7 <= 2.7.0 - Authenticated(Editor+) Privilege Escalation
Medium
CVE-2022-45370
WordPress Comments Import & Export <= 2.3.1 - CSV Injection
Medium
CVE-2023-25049
Vulnerability: eCommerce Product Catalog plugin for WordPress <= 3.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23711
A2 Optimized WP <= 3.0.4 - Cross Site Request Forgery
Medium
CVE-2022-2933
0mk Shortener <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-0684
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
Medium
CVE-2023-25037
Booking Calendar Contact Form <= 1.2.34 - Cross-Site Request Forgery via cpdexbccf_feedback
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.