Medium
CVE-2023-2123
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-4782
ClickFunnels <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-28690
WP BrowserUpdate <= 4.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-30609
HTML injection in search results via plaintext message highlighting
Medium
CVE-2023-30177
Cross Site Scripting in CraftCMS
Medium
CVE-2023-22665
Arbitrary javascript injection in Apache Jena
Medium
CVE-2023-27412
Mocho Blog <= 1.0.4 - Cross-Site Scripting
Critical
CVE-2023-2032
Custom 404 Pro <= 3.8.0 - Unauthenticated SQL Injection via 's'
High
CVE-2023-1347
Customizer Export/Import <= 0.9.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-43450
Stream <= 3.9.2 - Missing Authorization via load_alerts_settings
Critical
d22fb2e8-bb61-49bc-9fab-8f7c58339a69
Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection
Medium
CVE-2023-2113
Autoptimize <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting via Critical CSS Rules
Medium
CVE-2023-2289
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
High
CVE-2023-0579
YARPP - Yet Another Related Posts Plugin <= 5.30.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-27421
Everest News <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-2254
Ko-fi Button <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0274
URL Params <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0551
REST API TO MiniProgram <= 4.7.7 - Authenticated (Subscriber+) Media Attachment Deletion
Medium
CVE-2023-2272
Tiempo.com <= 0.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-28994
Flatsome <= 3.16.8 - Reflected Cross-Site Scripting in UX Builder
Medium
CVE-2023-0993
Shield Security <= 17.0.17 - Missing Authorization
Medium
CVE-2023-0058
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-2271
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Shortcode Deletion
Medium
CVE-2023-27420
Arya Multipurpose <= 1.0.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.