Medium
CVE-2023-40004
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-0689
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode
Medium
CVE-2023-26364
@adobe/css-tools Regular Expression Denial of Service (ReDOS) while Parsing CSS
High
CVE-2023-39663
MathJax Regular expression Denial of Service (ReDoS)
Critical
CVE-2023-40889
Heap-based buffer overflow in ZBar
Medium
CVE-2021-32050
MongoDB Driver may publish events containing authentication-related data
Medium
CVE-2023-41037
Cleartext Signed Message Signature Spoofing in openpgp
High
CVE-2023-40787
SpringBlade vulnerable to SQL injection
High
CVE-2023-40828
pf4j vulnerable to remote code execution via expandIfZip method in the extract function
High
CVE-2023-40827
pf4j vulnerable to remote code execution via loadpluginPath parameter
High
CVE-2023-40826
pf4j vulnerable to remote code execution via the zippluginPath parameter
High
CVE-2023-41005
Command injection in pagekit
Medium
CVE-2023-4600
AffiliateWP <= 2.14.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
Medium
CVE-2023-4599
Email Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4390
Popup Box <= 3.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41236
Happy Elementor Addons Pro <= 2.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-4148
Ditty <= 3.1.24 - Reflected Cross-Site Scripting
Medium
CVE-2023-41242
Snap Pixel <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40333
Bridge Core <= 3.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-41235
Everest News Pro <= 1.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-41244
Localize Remote Images <= 1.0.9 - Cross-Site Request Forgery via admin menu
Critical
CVE-2023-4596
Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-41241
SureCart <= 2.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-41238
Social Media & Share Icons <= 2.8.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.