Medium
CVE-2023-6225
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-34018
SoundCloud Shortcode <= 3.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6226
WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosure
Medium
CVE-2023-46641
12 Step Meeting List <= 3.14.24 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2023-47840
Qode Essential Addons <= 1.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Medium
CVE-2023-48751
Participants Database <= 2.5.5 - Missing Authorization
Medium
CVE-2023-39305
Yet Another Stars Rating <= 3.4.3 - Missing Authorization via init
Medium
CVE-2023-6295
SiteOrigin Widgets Bundle < 1.51.0 - Authenticated (Admin+) Local File Inclusion
Critical
CVE-2023-6360
My Calendar <= 3.4.21 - Unauthenticated SQL Injection
High
CVE-2023-6293
sequelize-typescript Prototype Pollution vulnerability
Medium
CVE-2023-49276
Attribute Injection leading to XSS(Cross-Site-Scripting)
Medium
ghsa-rqr8-pxh7-cq3g
Ethereum ABI decoder DoS when parsing ZST
High
CVE-2023-48796
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.
High
CVE-2023-5886
Export any WordPress data to XML/CSV < 1.4.1 & WP ALL Export Pro < 1.8.6 - Cross-Site Request Forgery to PHAR Deserialization
Medium
CVE-2023-48746
Community by PeepSo <= 6.2.6.0 - Reflected Cross-Site Scripting
Critical
CVE-2023-6584
WP JobSearch <= 2.3.3 - Authentication Bypass
Medium
CVE-2023-5691
Chatbot for WordPress <= 2.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-48333
Booster for WooCommerce <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+) Order Information Disclosure
High
CVE-2023-5882
Export any WordPress data to XML/CSV < 1.4.1 & WP ALL Export Pro < 1.8.6 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2023-48745
Captcha Code <= 2.9 - Captcha Bypass
Medium
CVE-2023-48748
Salient Core <= 2.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-4311
Vrm 360 3D Model Viewer <= 1.2.1 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2023-6505
Prime Mover <= 1.9.2 - Sensitive Information Exposure via Directory Listing
Critical
CVE-2023-6585
WP JobSearch <= 2.3.3 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.