Medium
CVE-2023-41237
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-49832
Site Reviews <= 6.10.2 - Missing Authorization
Medium
CVE-2023-41240
Pricing Deals for WooCommerce <= 2.0.3.2 - Missing Authorization via vtprd_ajax_clone_rule
Medium
CVE-2023-41239
PowerPress <= 11.0.6 - Authenticated (Contributor+) Server-Side Request Forgery via wp_ajax_powerpress_media_info
Critical
CVE-2023-39643
Improper neutralization of SQL parameter in Bl Modules - XML Feeds PRO module for PrestaShop
Critical
CVE-2023-39642
Improper neutralization of SQL parameter in Carts Guru - Marketing automation multicanal module for PrestaShop
Medium
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Medium
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
Medium
CVE-2023-39062
Spipu HTML2PDF vulnerable to cross-site scripting
High
CVE-2023-40590
GitPython untrusted search path on Windows systems leading to arbitrary code execution
High
CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
Medium
CVE-2023-30471
WP Search Analytics <= 1.4.7 - Reflected Cross-Site Scripting via 'render_stats_page'
High
CVE-2023-4300
Import XML and RSS Feeds <= 2.1.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-4471
Order Tracking Pro <= 3.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-25483
Easy Coming Soon <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-27448
MakeStories (for Google Web Stories) <= 3.0.2 - Cross-Site Request Forgery via 'ms_set_options'
Medium
CVE-2023-30493
Ultimate Addons for Contact Form 7 <= 3.1.0 - Reflected Cross-Site Scripting via 'page'
Critical
CVE-2023-4521
Import XML and RSS Feeds <= 2.1.4 - Unauthenticated Remote Code Execution
High
CVE-2023-4238
Prevent files / folders access <= 2.5.1 - Authenticated (Administrator+) Arbitrary File Upload in mo_media_restrict_page
Medium
CVE-2023-27615
WP Super Minify <= 1.5.1 - Cross-Site Request Forgery via 'wpsmy_admin_options'
High
CVE-2023-4549
DoLogin Security <= 3.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2023-40204
Folders <= 2.9.2 - Authenticated (Author+) Arbitrary File Upload in handle_folders_file_upload
Medium
CVE-2023-27428
WP Users Media <= 4.2.3 - Missing Authorization via wpusme_save_settings
Medium
CVE-2023-4500
Order Tracking Pro <= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.