Medium
CVE-2023-41339
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Low
CVE-2023-46122
sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)
Medium
CVE-2023-46120
RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack
High
CVE-2023-46119
Parse Server may crash when uploading file without extension
Medium
CVE-2023-44760
Concrete CMS Cross-site Scripting vulnerability
Medium
CVE-2023-46607
WP iCal Availability <= 1.0.3 - Missing Authorization
Medium
CVE-2023-46608
DoLogin Security <= 3.7.1 - Missing Authorization via REST Endpoints
Medium
CVE-2023-46610
Quill Forms <= 3.3.0 - Missing Authorization
High
CVE-2023-5311
WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification
Medium
CVE-2023-49836
Cookie Bar <= 2.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46614
WP Helper Premium <= 4.5.1 - Cross-Site Request Forgery via whp_fields
Medium
CVE-2023-46616
Draw Attention <= 2.0.15 - Improper Access Control via register_cpt
Medium
CVE-2023-46605
Convertful – Your Ultimate On-Site Conversion Tool <= 2.5 - Missing Authorization via add_woo_coupon
Medium
CVE-2023-46609
FeedFocal <= 1.2.2 - Missing Authorization via feedfocal_api_setup REST function
Medium
CVE-2023-46612
Mediabay <= 1.6 - Missing Authorization via AJAC actions
Medium
CVE-2023-5051
CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-46611
YOP Poll <= 6.5.28 - Reusable Captcha via validateImage
Medium
CVE-2023-46606
AtomChat <= 1.1.4 - Missing Authorization via credits REST API Endpoint
High
CVE-2023-46615
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
Medium
CVE-2023-5823
TK Google Fonts GDPR Compliant <= 2.2.11 - Missing Authorization to Font Addition
Medium
CVE-2023-5706
VK Blocks <= 1.63.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block
Critical
CVE-2023-46358
Improper neutralization of SQL parameter in Snegurka - Referral and Affiliation Program module for PrestaShop
Critical
CVE-2023-46347
Improper neutralization of SQL parameter in NDK Design - Step by Step products Pack module for PrestaShop
High
CVE-2023-46346
Improper Limitation of a Pathname to a Restricted Directory in MyPrestaModules - Product Catalog (CSV, Excel, XML) Export PRO module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.