Medium
CVE-2023-2280
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Low
CVE-2023-2117
Image Optimizer by 10web <= 1.0.26 - Authenticated(Administator+) Directory Traversal
Medium
CVE-2023-1839
PPOM for WooCommerce <= 32.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Critical
CVE-2023-30869
Easy Digital Downloads 3.1 - 3.1.1.4.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
Medium
CVE-2023-2223
Login rebuilder <= 2.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32106
WP Docs <= 1.9.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-2023
Custom 404 Pro <= 3.7.2 - Reflected Cross-Site Scripting via 's'
High
CVE-2023-0443
AnyWhere Elementor <= 1.2.7 - Sensitive Information Exposure
Medium
CVE-2023-2296
Loginizer <= 1.7.8 - Reflected Cross-Site Scripting via 'limit_session[count]'
Medium
CVE-2023-2111
HollerBox <= 2.1.3 - Authenticated (edit_popups+) SQL Injection
High
CVE-2023-0733
Newsletter Popup <= 1.2 - Unauthenticted Stored Cross-Site Scripting via 'nl_data'
Medium
288853b8-7523-472e-8406-257ffb3bd5ea
WP-FormAssembly <= 2.0.8 - Limited Server Side Request Forgery via 'formassembly' shortcode
Medium
CVE-2023-0766
Newsletter Popup <= 1.2 - Cross-Site Request Forgery to Record Deletion
Medium
CVE-2023-2470
Add to Feedly <= 1.2.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
High
CVE-2023-30282
Exposure of Private Personal Information to an Unauthorized Actor in SC Export Customers module for PrestaShop
High
CVE-2023-30860
WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account
Medium
CVE-2023-29641
editor.md vulnerable to Cross-site Scripting
Medium
CVE-2022-45801
Apache StreamPark LDAP Injection vulnerability
Low
CVE-2023-30857
Possible prototype pollution in metadata record, when using meta decorator
Critical
ghsa-83fm-w79m-64r5
Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
Medium
CVE-2023-2361
Cross-site Scripting (XSS) in pimcore
Medium
CVE-2023-1465
WP EasyPay <= 4.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-2256
PPOM for WooCommerce <= 32.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-2452
Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.