High
CVE-2023-32511
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-31141
OpenSearch issue with fine-grained access control during extremely rare race conditions
Critical
CVE-2023-31126
Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml
Critical
CVE-2023-32071
XWiki Platform vulnerable to RXSS via editor parameter - importinline template
High
CVE-2023-31143
Mage-ai missing user authentication
High
CVE-2023-2591
teampass vulnerable to code injection
Medium
CVE-2023-28749
CM On Demand Search And Replace <= 1.3.0 - Cross-Site Request Forgery
Low
CVE-2023-32497
Block Referer Spam <= 1.1.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
f68ac2b8-33dc-4cc2-b0f3-8777450e39f9
Pro Mime Types - Manage file media types <= 1.0.7 - Cross-Site Request Forgery via pmt_settings_section_callback_tab_1
Critical
CVE-2022-47586
Ultimate Addons for Contact Form 7 <= 3.1.23 - Unauthenticated SQL Injection via form_id
Medium
CVE-2023-27923
VK Blocks <= 1.53.0.1 - Stored (Contributor+) Cross-Site Scripting in Tag Edit
Medium
CVE-2023-24409
WP Responsive Tabs horizontal vertical and accordion Tabs <= 1.1.15 - Reflected Cross-Site Scripting
Medium
CVE-2023-2399
QuBotChat <= 1.1.5 - Unauthenticated Self-Based Cross-Site Scripting
High
CVE-2023-32121
Zero Spam <= 5.4.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-32126
SALERT <= 1.2.1 - Missing Authorization via salert_save_settings_with_ajax()
Medium
CVE-2023-28775
Yoast SEO Premium <= 20.4 - Missing Authorization to Zapier Key Reset
Medium
CVE-2023-29099
Divi <= 4.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-32502
Pro Mime Types <= 1.0.7 - Cross-Site Request Forgery
Medium
CVE-2023-32300
Yoast SEO: Local <= 14.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-32503
GTmetrix for WordPress <= 0.4.6 - Reflected Cross-Site Scripting via 'report_id' and 'event_id'
Medium
CVE-2023-28780
Yoast SEO: Local <= 14.8 - Cross-Site Request Forgery
Medium
CVE-2023-32498
Easy Form by AYS <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32505
Easy Hide Login <= 1.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
6a830fb8-de5f-40c7-bb6c-464ed916b440
My WP Customize Admin/Frontend <= 1.21.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.