Medium
CVE-2023-37867
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-3507
WooCommerce Pre-Orders <= 2.0.2 - Cross-Site Request Forgery to Order Cancellation
Medium
CVE-2023-37981
Authors List <= 2.0.2 - Reflected Cross-Site Scripting via al_id
Medium
CVE-2023-37971
WooCommerce Product Stock Alert <= 2.0.1 - Missing Authorization via API
Medium
CVE-2023-3134
Forminator <= 1.24.1 - Reflected Cross-Site Scripting
High
CVE-2023-3553
TeamPass information exposure vulnerability
High
CVE-2023-3552
TeamPass vulnerable to Improper Encoding or Escaping of Output
Critical
CVE-2023-3551
TeamPass Code Injection vulnerability
Low
CVE-2023-37269
Winter CMS stored XSS through privileged upload of SVG file
High
CVE-2018-1000888
Archive_Tar contains Potential RCE if filename starts with phar://
Medium
CVE-2023-33008
Apache Johnzon Deserialization of Untrusted Data vulnerability
Medium
CVE-2023-25042
oAuth Twitter Feed for Developers <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-24412
Image Social Feed Plugin <= 1.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-35909
Ninja Forms <= 3.6.25 - Denial of Service via Large Form Submissions
Medium
CVE-2023-25477
Video Gallery <= 1.3.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
747afa58-182a-4fb3-bfe3-f15db0b1d85a
WP SMS <= 6.1.5 - Cross-Site Request Forgery
Critical
CVE-2023-37999
HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation
Medium
CVE-2023-25044
Social Share Boost <= 4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-3525
Getnet Argentina para Woocommerce 0.0.1 - 0.0.4 - Authorization Bypass via webhook
Medium
CVE-2023-37391
WordPress Mobile Pack <= 3.4.1 - Cross-Site Request Forgery
Critical
15f3a6e1-6126-4825-b2b1-e40dc5694f43
Atarim - Client Interface <= 3.9.1 - Missing Authorization via AJAX actions
Medium
0007d830-2e68-4c2f-8fac-f4363bc2d73d
Gift Cards (Gift Vouchers and Packages) <= 4.3.5 - Cross-Site Request Forgery in new_voucher_template.php
Unrated
790
Plugin Creative Gallery - SQL Injection
Unrated
792
Virtual Classroom - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.