High
CVE-2023-3958
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-40327
Putler Connector for WooCommerce <= 2.12.0 - Missing Authorization via 'putler_connector_sync_complete'
Medium
CVE-2023-54397
Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths
Critical
CVE-2023-40013
external-svg-loader Cross-site Scripting vulnerability
Medium
CVE-2023-38687
Svelecte item names vulnerable to execution of arbitrary JavaScript
Medium
CVE-2023-40312
OpenNMS vulnerable to Cross-site Scripting
Medium
CVE-2023-40311
OpenNMS vulnerable to Cross-site Scripting
High
CVE-2023-0872
OpenNMS privilege elevation vulnerability
High
CVE-2023-4321
Cockpit Cross-site Scripting vulnerability
Critical
CVE-2023-35039
Password Reset with Code for WordPress REST API <= 0.0.15 - Weak Password Recovery Mechanism
Medium
CVE-2023-3814
Advanced File Manager <= 5.1 - Authenticated (Administrator+) Arbitrary File and Folder Access
High
CVE-2023-2916
InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2023-4019
Media from FTP <= 11.16 - Authenticated (Author+) Improper Privilege Management
Medium
CVE-2023-27433
Make Paths Relative <= 1.3.0 - Cross-Site Request Forgery via 'admin/class-make-paths-relative-admin.php'
Medium
CVE-2023-4279
User Activity Log <= 1.6.6 - IP Address Spoofing
Medium
CVE-2023-29441
WebLibrarian <= 3.5.8.1 - Reflected Cross-Site Scripting via multiple parameters
Low
CVE-2023-4216
Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url'
High
CVE-2023-4308
User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
Medium
39c9f055-2527-4678-bda1-27a29ab24acd
Products Quick View for WooCommerce <= 2.2.0 - Missing Authorization
Medium
CVE-2023-2813
Multiple Themes (Various Versions) - Reflected Cross-Site Scripting via Search Field
Medium
CVE-2023-30497
LINE Notify <= 1.4.4 - Reflected Cross-Site Scripting via 'uid'
Medium
CVE-2023-4298
123.chat <= 1.3.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38394
JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization
High
CVE-2023-38385
JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.