Critical
b280155e-6d07-448d-922c-4a0ea21f4992
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-4242
FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check
High
CVE-2023-4243
FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation
Medium
CVE-2023-4059
Profile Builder <= 3.9.7 - Missing Authorization to Initial Page Creation
Medium
55fac183-bd8d-4e16-b25a-784861897deb
Paid Memberships Pro - Courses for Membership Add On <= 1.2.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-3360
Weaver Show Posts <= 1.8.0 - Authenticated (Administrator+) PHP Object Injection
Medium
2077bd81-52bd-4aa7-85f6-9abb02aec65b
JCH Optimize <= 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Settings Modification
Medium
CVE-2023-4253
ChatBot <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Medium
CVE-2023-4254
ChatBot 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in Language Settings
Medium
0e454573-4b34-40e3-b4c3-10eb71dfa03e
Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Cross-Site Request Forgery to Course Modifications
Critical
CVE-2023-39363
Vyper has incorrectly allocated named re-entrancy locks
Critical
CVE-2023-37390
Themesflat Addons For Elementor <= 2.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2023-39918
Booking Package <= 1.6.01 - Reflected Cross-Site Scripting via 'mode'
Medium
CVE-2023-4109
Ninja Forms <= 3.6.25 - Authenticated (Administrator+) Stored HTML Injection
Medium
CVE-2023-39314
Leyka <= 3.30.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-39165
Sign-up Sheets <= 2.2.8 - Cross-Site Request Forgery
Medium
CVE-2023-4013
GDPR Cookie Compliance <= 4.12.4 - Cross-Site Request Forgery to License Modification
Medium
CVE-2023-4209
POEditor <= 0.9.7 - Cross-Site Request Forgery
Medium
CVE-2023-39923
The Post Grid <= 7.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-4150
User Activity Tracking and Log <= 4.0.8 - Cross-Site Request Forgery
Medium
CVE-2023-4023
All Users Messenger <= 1.24 - Authenticated (Subscriber+) Insecure Direct Object Reference to Message Deletion
Medium
CVE-2023-39917
Photo Gallery by Ays <= 5.2.6 - Cross-Site Request Forgery
High
CVE-2023-39527
Possible XSS injection through Validate::isCleanHTML method
Medium
CVE-2023-39526
SQL manager vulnerability (potential RCE)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.