Medium
CVE-2023-2767
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-2498
Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-32679
Craft CMS vulnerable to Remote Code Execution via unrestricted file extension
Medium
CVE-2023-32325
Potential for cross-site scripting in PostHog-js
Medium
CVE-2023-32688
Invalid push request payload crashes Parse Server
Critical
CVE-2023-32692
Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4
Medium
CVE-2023-31101
User data exposure in Apache InLong
Medium
CVE-2023-33264
Hazelcast vulnerable to unmasked password exposure
High
CVE-2023-33252
Double spend in snarkjs
Critical
CVE-2023-33930
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Zip Extraction to Arbitrary File Upload in File Manager
Medium
e743e656-2dd9-43ed-a190-b03af7c75c54
Abandoned Cart Lite for WooCommerce <= 5.14.1 - Cross-Site Request Forgery via ts_reset_tracking_setting
Medium
CVE-2023-33322
Front End Users <= 3.2.24 - Reflected Cross-Site Scripting
Medium
CVE-2023-33312
Easy Captcha <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-2742
AI ChatBot <= 4.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-2719
SupportCandy <= 3.1.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-33325
Leyka <= 3.30.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-2518
Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-32800
Rank Math SEO PRO <= 3.0.35 - Reflected Cross-Site Scripting
Medium
CVE-2023-33314
BEAR <= 1.1.3.1 - Cross-Site Request Forgery via Multiple Functions
Medium
a1e51a99-f5d4-47d4-bead-00ca1f5f72c2
Abandoned Cart Lite for WooCommerce <= 5.14.1 - Cross-Site Request Forgery via delete_expired_used_coupon_code
Critical
CVE-2023-33318
WooCommerce Follow-Up Emails <= 4.9.40 - Authenticated Arbitrary File Upload in Template Editing
Critical
CVE-2023-31090
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.60 - Arbitrary File Upload in File Manager
High
CVE-2023-33324
Easy Captcha <= 1.0 - Missing Authorization via easy_captcha_update_settings
Medium
CVE-2023-2398
Icegram Engage <= 3.1.11 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.