Medium
CVE-2023-32965
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-32962
WishSuite <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-31236
Scripts n Styles <= 3.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-33207
Stop Referrer Spam <= 1.3.0 - Cross-Site Request Forgery via processParameters
Medium
CVE-2023-32963
WooCommerce Predictive Search <= 5.8.0 - Cross-Site Request Forgery via multiple AJAX actions
Medium
CVE-2023-32964
Better Notifications for WP <= 1.9.2 - Cross-Site Request Forgery via handle_actions
Medium
CVE-2023-25462
WP htaccess Control <= 3.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32966
Jazz Popups <= 1.8.7 - Cross-Site Request Forgery
Medium
CVE-2023-32960
UpdraftPlus <= 1.23.3 - Cross-Site Request Forgery to Cross-Site Scripting via action_authenticate_storage
Medium
CVE-2023-33208
Cookie Monster <= 1.51 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-2704
BP Social Connect <= 1.5 - Authentication Bypass
Critical
CVE-2023-2780
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
Medium
CVE-2023-26044
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits
High
CVE-2023-2756
pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query
Medium
CVE-2023-2752
phpMyFAQ vulnerable to stored Cross-site Scripting
Medium
CVE-2023-2753
phpMyFAQ vulnerable to stored Cross-site Scripting
Medium
CVE-2023-32313
vm2 vulnerable to Inspect Manipulation
Medium
CVE-2023-2261
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
Medium
CVE-2023-2286
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
Critical
CVE-2023-2733
MStore API <= 3.9.0 - Authentication Bypass
Medium
CVE-2023-2284
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
Medium
CVE-2023-2285
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
Medium
CVE-2023-23900
Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting via 'sql_error'
High
CVE-2023-2757
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.