Medium
CVE-2023-45106
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-45108
Mailrelay <= 2.1.1 - Cross-Site Request Forgery via render_admin_page
Medium
CVE-2023-45102
Blog Manager Light <= 1.20 - Cross-Site Request Forgery via bml_settings
Medium
CVE-2023-45273
Stout Google Calendar <= 1.2.3 - Cross-Site Request Forgery via sgc_plugin_options
Medium
CVE-2023-45276
Automated Editor <= 1.3 - Cross-Site Request Forgery via admin menu pages
Medium
CVE-2023-45109
WhitePage <= 1.1.5 - Cross-Site Request Forgery via params_api_form.php
Low
CVE-2023-45105
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.9 - Open Redirect via atkpout.php
Medium
CVE-2023-45269
Simple SEO <= 2.0.25 - Cross-Site Request Forgery via multiple admin_post functions
Medium
CVE-2023-36820
io.micronaut.security:micronaut-security-oauth2 has invalid IdTokenClaimsValidator logic on aud
High
ghsa-4c29-gfrp-g6x9
CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
High
ghsa-94vc-p8w7-5p49
Bundled libwebp in imagecodecs vulnerable
Medium
CVE-2023-4797
Newsletter Lite <= 4.9.2 - Authenticated (Admin+) Command Injection
Medium
CVE-2023-1259
Hotjar <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4469
Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure
Critical
CVE-2023-44024
Improper neutralization of SQL parameters in KnowBand - One Page Checkout, Social Login & Mailchimp module for PrestaShop
Critical
CVE-2023-40920
Improper neutralization of an SQL parameter in prixanconnect module for PrestaShop
Low
CVE-2023-44389
Zope management interface vulnerable to stored cross site scripting via the title property
Medium
CVE-2023-44390
HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content
Medium
CVE-2023-45023
TYPO3 extension femanager Broken Access Control vulnerability
High
CVE-2023-43804
`Cookie` HTTP header isn't stripped on cross-origin redirects
Unrated
drupal-contrib-2023-048
drupal/mail_login - SA-CONTRIB-2023-048
High
ghsa-mvrp-3cvx-c325
Zod denial of service vulnerability during email validation
High
CVE-2023-1584
Quarkus OIDC can leak both ID and access tokens
Medium
c5429fb1-7072-4a00-8fb3-48d4f876417f
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.