Medium
CVE-2023-32238
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-30094
Cross-site scripting in TotalJS
Critical
CVE-2023-30331
Server-side template injection in beetl
Medium
CVE-2023-32127
Multi Rating <= 5.0.6 - Missing Authorization to Arbitrary Ratings Value Change
Medium
CVE-2023-30777
Advanced Custom Fields (Free and Pro) 5.8.10 to 5.12.5 & 6.0.0 to 6.1.5 - Reflected Cross-Site Scripting via 'post_status'
Medium
CVE-2023-32120
Hostel <= 1.1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Manage Bookings
Medium
CVE-2023-29387
Manager for Icomoon <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-32125
Multi Rating <= 5.0.6 - Cross-Site Request Forgery to Arbitrary Ratings Value Change
Medium
7b78004e-caa5-4478-ba16-5f1a10e31541
DX Delete Attached Media <= 2.0.2 - Missing Authorization to Settings Update
Medium
CVE-2023-32130
Multi Rating <= 5.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-32129
Editorialmag <= 1.2.0 - Missing Authorization to Authenticated Plugin Activation
Medium
CVE-2023-1843
Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization
Unrated
775
Creative Gallery - SQL Injection
High
CVE-2023-30281
Exposure of Private Personal Information to an Unauthorized Actor in SC Quick Accounting module for PrestaShop
High
CVE-2023-31133
Ghost vulnerable to information disclosure of private API fields
Medium
CVE-2023-31125
engine.io Uncaught Exception vulnerability
Critical
CVE-2023-25826
Command injection in OpenTSDB
High
CVE-2023-25827
Cross Site Scripting in OpenTSDB
Unrated
drupal-contrib-2023-014
drupal/s3fs - SA-CONTRIB-2023-014
High
CVE-2023-30750
CM Pop-Up banners <= 1.5.10 - Authenticated (Subscriber+) SQL Injection via getStatistics
Medium
CVE-2023-32109
Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting
High
dd3fc3a4-ba32-4c05-bc93-ed7b86c426fa
Contact Form 7 extension for Google Map fields <= 1.8.3 - Stored Cross-Site Scripting
Medium
CVE-2023-32107
Photo Gallery by Ays <= 5.1.3 - Reflected Cross-Site Scripting via ays_gpg_settings_tab
High
CVE-2023-32110
JupiterX Theme <= 3.0.0 - Authenticated Local File Inclusion via print_pane
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.