High
CVE-2023-37976
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-37968
Falang multilanguage <= 1.3.39 - Cross-Site Request Forgery via add_language
Medium
CVE-2023-37894
Variation Images Gallery for WooCommerce <= 2.3.3 - Reflected Cross-Site Scripting via style
High
CVE-2023-24410
FluentForm <= 4.3.25 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-37970
MF Gig Calendar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via event_title and event_time
Medium
CVE-2023-37972
WooCommerce Product Stock Alert <= 2.0.1 - Information Disclosure
Medium
CVE-2023-37893
Coming Soon Chop Chop <= 2.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-37973
Replace Word <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-37975
Variation Swatches for WooCommerce <= 2.3.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-34381
Zippy <= 1.6.2 - Missing Authorization via adminInit
High
CVE-2023-32117
Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints
High
CVE-2023-37966
User Activity Log <= 1.6.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-34010
Media Library Assistant <= 3.07 - Reflected Cross-Site Scripting
Medium
55bb3620-c182-46c4-bc22-8526cf410cdb
KB Support <= 1.5.88 - Missing Authorization to Authenticated (Subscriber+) User Data Retrieval
Medium
CVE-2023-37983
Art Direction <= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-37969
Checkout with Zelle on Woocommerce <= 3.1 - Missing Authorization
Unrated
797
JC Dashboards - Other
Unrated
799
quickform - Other
Unrated
CVE-2023-38045
admirror gallery - XSS (Cross Site Scripting)
Critical
CVE-2023-36825
Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution
Low
ghsa-h9wq-xcqx-mqxm
Vendure Cross Site Request Forgery vulnerability impacting all API requests
High
CVE-2023-33127
Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability
High
CVE-2023-33170
Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability
High
CVE-2023-37271
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.