Medium
CVE-2023-35884
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-33327
Leyka <= 3.30.2 - Privilege Escalation via Admin Password Reset
High
CVE-2023-30196
Improper Limitation of a Pathname to a Restricted Directory in Webbax - Sales Booster module for PrestaShop
Medium
CVE-2023-33315
Smart App Banner <= 1.1.2 - Cross-Site Request Forgery via wsl_smart_app_banner_options
Medium
CVE-2023-2812
Ultimate Dashboard <= 3.7.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-32675
Vyper's nonpayable default functions are sometimes payable
Medium
CVE-2023-2666
Froxlor vulnerable to Allocation of Resources Without Limits or Throttling
High
CVE-2023-2665
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
Medium
CVE-2023-2717
Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Plugins
High
CVE-2023-2736
Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2023-2580
AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable <= 1.6.82 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
6300c8c2-f539-46b2-9ee0-80bebbe4cad3
WordPress Core < 6.2.1 - Shortcode Execution in User Generated Content
Medium
4e3a6fe2-6292-44ff-8925-a4aeb77c2a7f
WordPress Core < 6.2.2 - Shortcode Execution in User Generated Content
Medium
CVE-2023-2735
Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2716
Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Upload
Medium
CVE-2023-2714
Groundhogg <= 2.7.9.8 - Missing Authorization to Update License
Medium
CVE-2023-2715
Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation
Medium
CVE-2023-33216
WooDiscuz – WooCommerce Comments <= 2.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2800
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.
Medium
CVE-2023-30124
LavaLite vulnerable to Cross Site Scripting
Medium
CVE-2023-33210
nuajik CDN <= 0.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
CVE-2023-31233
Baidu Tongji generator <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-24390
WeSecur Security <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-33209
SEO Change Monitor <= 1.2 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.