Medium
CVE-2023-40002
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-51513
Geo Controller <= 8.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
ghsa-86q5-qcjc-7pv4
Presto JDBC Server-Side Request Forgery by nextUri
High
ghsa-xm7x-f3w2-4hjm
Presto JDBC Server-Side Request Forgery by redirect
High
CVE-2023-26151
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop a
High
CVE-2023-26150
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue i
High
CVE-2023-26152
static-server Path Traversal vulnerability
Medium
CVE-2023-45067
WP Simple HTML Sitemap <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-30870
Sharkdropship for AliExpress Dropship and Affiliate <= 2.2.4 - Missing Authorization
Medium
CVE-2023-45057
Hitsteps Web Analytics <= 5.86 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-45003
Social Feed <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-45006
WooODT Lite <= 2.4.6 - Reflected Cross-Site Scripting
High
CVE-2023-28748
Copy Or Move Comments <= 5.0.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-45064
OPcache Dashboard <= 0.3.1 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2023-45059
Gumroad <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
c49b3841-370b-42ed-9545-e69c2544642d
Marker.io <= 1.1.6 - Cross-Site Request Forgery
High
CVE-2023-45046
Pressference Exporter <= 1.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-44998
Category Meta <= 1.2.8 - Cross-Site Request Forgery
Medium
CVE-2023-44993
ChatBot <= 4.7.8 - Cross-Site Request Forgery via qc_wp_latest_update_check
Medium
CVE-2023-45008
Comment Reply Email <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5291
Blog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-45055
MStore API <= 4.0.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-44995
WooCommerce Login Redirect <= 2.2.4 - Cross-Site Request Forgery
Medium
CVE-2023-45011
WP Power Stats <= 2.2.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.