Medium
CVE-2022-47441
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-23674
WP Original Media Path <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-27455
Update Image Tag Alt Attribute <= 2.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-0812
Active Directory Integration / LDAP Integration <= 4.1.0 - Unauthenticated Information Disclosure
Medium
CVE-2023-27889
LIQUID SPEECH BALLOON <= 1.1.8 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-23641
Uji Popup <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via uji_popup_code shortcode
High
CVE-2023-1549
Ad Inserter <= 2.7.25 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2023-23671
Layer Slider <= 1.1.9.7 - Cross-Site Request Forgery via save_slide_ajax
Medium
CVE-2023-22672
vSlider Multi Image Slider <= 4.1.2 - Cross-Site Request Forgery
High
CVE-2022-47430
The School Management – Education & Learning Management <= 4.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-23646
Album Gallery – WordPress Gallery <= 1.4.9 - Cross-Site Request Forgery via album-gallery-column-settings.php
Medium
CVE-2022-38716
Motors – Car Dealer & Classified Ads <= 1.4.5 - Cross-Site Request Forgery via Multiple Functions
Medium
0b4a0dff-1054-4f50-8ff5-e3cc2b45d77b
Image Optimizer by 10web <= 1.0.25 - Directory Traversal to Information Exposure
Medium
CVE-2023-22690
Ebook Store < 5.78 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47436
Yatra <= 2.1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-26325
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-45815
GDPR Compliance & Cookie Consent <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-30543
`chainId` may be outdated if user changes chains as part of connection in @web3-react
High
ghsa-xv3q-jrmm-4fxv
Authentication Bypass in @strapi/plugin-users-permissions
Medium
CVE-2023-30536
Insecure header validation in slim/psr7
Low
CVE-2023-26049
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
Medium
CVE-2023-30608
sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service
Medium
CVE-2023-2160
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.
High
CVE-2023-2017
Shopware Has Improper Control of Generation of Code in Twig rendered views
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.