High
CVE-2023-49373
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-49375
Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/update
High
CVE-2023-49372
Cross-Site Request Forgery in JFinalCMS
High
CVE-2023-41835
Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerability
High
CVE-2023-43472
Information exposure in MLflow
Medium
CVE-2023-49289
Ajax Pro Cross-site Scripting
Medium
CVE-2023-49827
Soledad <= 8.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-21749
1 click disable all <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2023-49835
Post Duplicator <= 2.31 - Missing Authorization via mtphr_duplicate_post
Medium
CVE-2023-49820
Structured Content <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-49829
Tutor LMS <= 2.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-49776
Sayfa Sayaç <= 2.6 - Unauthenticated SQL Injection
Medium
CVE-2023-49771
Smart External Link Click Monitor [Link Log] <= 5.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-6446
Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-49830
Astra Pro <= 4.3.1 - Authenticated(Contributor+) Remote Code Execution via Metabox
Critical
CVE-2023-49778
Sayfa Sayaç <= 2.6 - Unauthenticated PHP Object Injection
Medium
CVE-2023-49818
Webflow Pages <= 1.0.8 - Missing Authorization
Critical
CVE-2023-49773
BCorp Shortcodes <= 0.23 - Unauthenticated PHP Object Injection
Medium
CVE-2023-49823
Bold Page Builder <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-49770
Smart External Link Click Monitor [Link Log] <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-49825
Soledad <= 8.4.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-49812
WP Photo Album Plus <= 8.5.02.005 - Insecure Direct Object Reference
Critical
CVE-2023-49826
Soledad <= 8.4.1 - Unauthenticated PHP Object Injection
High
CVE-2023-49814
Symbiostock Lite <= 6.0.0 - Authenticated (Shop Manager+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.