Medium
CVE-2023-5109
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-5086
Copy Anything to Clipboard <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4668
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe
Medium
CVE-2023-5121
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
996dc1d7-12f8-467d-bf48-a7a82f1c0a41
Brands for WooCommerce <= 3.8.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-5135
Simple Cloudflare Turnstile <= 1.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44151
Pre-Publish Checklist <= 1.1.1 - Insecure Direct Object Reference to Arbitrary Post '_ppc_meta_key' Update
Medium
CVE-2023-49197
DoFollow Case by Case <= 3.4.2 Cross-Site Request Forgery via getEmail and getUrl
High
CVE-2023-4274
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal
Medium
CVE-2023-4645
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
Medium
CVE-2023-5134
Easy Registration Forms <= 2.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-5120
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2023-44148
Astra Bulk Edit <= 1.2.7 - Missing Authorization
High
00687370-8374-44cc-8fd1-53b462acd061
iPanorama 360 – WordPress Virtual Tour Builder <= 1.7.3 - Authenticated (Admin+) SQL injection
Unrated
809
EasyShop - XSS (Cross Site Scripting)
Low
ghsa-hc5c-r8m5-2gfh
plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Critical
CVE-2023-42810
systeminformation SSID Command Injection Vulnerability
Medium
CVE-2023-41048
plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1.3, and 6.2.1, there is a stored cross sit
Critical
ghsa-j646-gj5p-p45g
CefSharp affected by heap buffer overflow in WebP
Low
ghsa-v8gr-m533-ghj9
Vulnerable OpenSSL included in cryptography wheels
High
CVE-2023-42457
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the `++api++` traverser is accidentally
Medium
CVE-2023-5104
Improper Input Validation in nocodb
Medium
CVE-2018-5478
Contao Cross-site Scripting vulnerabililty
Critical
CVE-2015-5467
Yii2 allows attackers to execute any local .php file via a relative path in the view parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.