Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Unknown — Vulnerabilities & Security Advisories 4138

Browse all 4138 CVE security advisories affecting Unknown. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by Unknown:Contest GalleryDownload ManagerTutor LMS – eLearning and online course solutionEventONModern Events Calendar Litewp-eMemberAI ChatBotElementor Website BuilderNinja Forms Contact Form – The Drag and Drop Form Builder for WordPressWelcart e-CommerceLogo SliderForm Maker by 10WebBooster for WooCommerceYi Technologywp-cart-for-digital-productswp-affiliate-platformPhoto Gallery by 10WebMapPress Maps for WordPressEventPrimePopup boxWPQA BuilderWP MultiTaskingPhoto Gallery by 10Web – Mobile-Friendly Image GallerySalon booking systemSimple Download MonitorAutoptimizeVikBooking Hotel Booking Engine & PMSLearnPressNewsletter PopupNinja Forms
CVE IDTitleCVSSSeverityPublished
CVE-2023-5955 Contact Form Email < 1.3.44 - Editor+ Stored Cross-Site Scripting — Contact Form Email 4.8AIMediumAI2023-12-11
CVE-2023-5749 EmbedPress < 3.9.2 - Reflected XSS — EmbedPress 6.1AIMediumAI2023-12-11
CVE-2023-5757 WP Crowdfunding < 2.1.8 - Admin+ Stored XSS — WP Crowdfunding 4.8AIMediumAI2023-12-11
CVE-2023-5940 WP Not Login Hide <= 1.0 - Admin+ Stored XSS — WP Not Login Hide (WPNLH) 4.8AIMediumAI2023-12-11
CVE-2023-5750 EmbedPress < 3.9.2 - Reflected XSS — EmbedPress 6.1AIMediumAI2023-12-11
CVE-2023-6035 EazyDocs < 2.3.4 - Subscriber + SQLi — EazyDocs 8.8AIHighAI2023-12-11
CVE-2023-5907 File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal — File Manager 6.5AIMediumAI2023-12-11
CVE-2023-5809 Popup box < 3.8.6 - Admin+ Stored XSS in Categories — Popup box 4.8AIMediumAI2023-12-04
CVE-2023-5141 BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site Scripting — BSK Contact Form 7 Blacklist 6.1AIMediumAI2023-12-04
CVE-2023-6063 WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection — WP Fastest Cache 9.8AICriticalAI2023-12-04
CVE-2023-5884 Word Balloon < 4.20.3 - Avatar Removal via CSRF — Word Balloon 4.3AIMediumAI2023-12-04
CVE-2023-5108 Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi — Easy Newsletter Signups 7.2AIHighAI2023-12-04
CVE-2023-5990 Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRF — Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor 8.1AIHighAI2023-12-04
CVE-2023-5210 AMP+ Plus <= 3.0 - Reflected Cross Site Scripting — AMP+ Plus 6.1AIMediumAI2023-12-04
CVE-2023-4460 Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVG — Uploading SVG, WEBP and ICO files 5.4AIMediumAI2023-12-04
CVE-2023-5951 Welcart e-Commerce < 2.9.5 - Reflected XSS — Welcart e-Commerce 6.1AIMediumAI2023-12-04
CVE-2023-5137 Simply Excerpts <= 1.4 - Admin+ Stored XSS — Simply Excerpts 4.8AIMediumAI2023-12-04
CVE-2023-5762 Filr – Secure document library < 1.2.3.6 - Author+ RCE via file upload with phar ext — Filr 8.8AIHighAI2023-12-04
CVE-2023-5874 Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings — Popup box 4.8AIMediumAI2023-12-04
CVE-2023-5953 Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload — Welcart e-Commerce 8.8AIHighAI2023-12-04
CVE-2023-5952 Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection — Welcart e-Commerce 9.8AICriticalAI2023-12-04
CVE-2023-5105 Frontend File Manager < 22.6 - Editor+ Arbitrary File Download — Frontend File Manager Plugin 6.5AIMediumAI2023-12-04
CVE-2023-5979 eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF — eCommerce Product Catalog Plugin for WordPress 6.5AIMediumAI2023-12-04
CVE-2023-5641 Martins Free & Easy SEO Link buildings < 1.2.30 - Reflected XSS — Martins Free & Easy SEO BackLink Link Building Network 6.1 -2023-11-27
CVE-2023-5525 Limit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-Update — Limit Login Attempts Reloaded 5.3 -2023-11-27
CVE-2023-5620 Webpushr < 4.35.0 - Unauthenticated Stored XSS — Web Push Notifications 5.4 -2023-11-27
CVE-2023-5559 10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion — 10Web Booster 8.2 -2023-11-27
CVE-2023-5611 Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import — Seraphinite Accelerator 5.3 -2023-11-27
CVE-2023-5942 Medialist < 1.4.1 - Contributor+ Stored XSS — Medialist 5.4 -2023-11-27
CVE-2023-5738 WordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSS — WordPress Backup & Migration 5.4 -2023-11-27

This page lists every published CVE security advisory associated with Unknown. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.