Critical
CVE-2023-24000
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-25706
Robots.txt optimization <= 1.4.5 - Cross Site Request Forgery
Medium
CVE-2023-0156
All-In-One Security (AIOS) <= 5.1.4 - Authenticated(Admin+) Directory Traversal
Critical
CVE-2023-2297
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism
Medium
CVE-2023-0814
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode
Medium
CVE-2023-25715
GamiPress <= 2.5.6 - Missing Authorization to User Points Updates
High
CVE-2023-25045
RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via $email value
High
CVE-2022-3568
ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to PHAR Deserialization
High
CVE-2022-4265
Replyable – Subscribe to Comments and Reply by Email <= 2.2.9 - Authenticated (Subscriber+) PHP Object Injection via prompt_dismiss_notice
Medium
CVE-2023-0723
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
Medium
CVE-2023-0711
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
Medium
CVE-2023-0715
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
Medium
CVE-2023-0729
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
Medium
CVE-2023-0719
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
Medium
CVE-2023-0720
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
Medium
CVE-2023-1110
Yellow Yard Searchbar <= 2.7.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0725
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
Medium
CVE-2023-0727
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
Medium
CVE-2023-0726
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder
Medium
CVE-2023-0728
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
Medium
CVE-2023-0730
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
Medium
CVE-2023-0716
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
Medium
CVE-2023-0717
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
Medium
CVE-2023-0718
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.