Medium
CVE-2023-29197
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-28787
Quiz and Survey Master <= 8.1.4 - Unauthenticated SQL Injection
Medium
2b2302d9-426c-415b-a7d3-3a9de95d87d1
WPML <= 4.6.0 - Reflected Cross-Site Scripting via wp_lang
High
CVE-2021-34337
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrar
Medium
CVE-2023-2102
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
Medium
CVE-2023-2105
alextselegidis/easyappointments Session Fixation vulnerability
Medium
CVE-2023-2104
alextselegidis/easyappointments Improper Access Control vulnerability
Medium
CVE-2023-2103
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
High
CVE-2023-30535
Snowflake JDBC vulnerable to command injection via SSO URL authentication
Medium
CVE-2023-29529
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
Critical
CVE-2023-2034
froxlor/froxlor vulnerable to unrestricted upload of file with dangerous type
Medium
CVE-2023-27425
Electric Studio Client Login <= 0.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47177
WP EasyPay <= 4.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-23725
Shortcodes by Angie Makes <= 3.46 - Missing Authorization
Medium
CVE-2023-30748
Easy Appointments <= 3.11.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-2027
ZM Ajax Login & Register <= 2.0.2 - Authentication Bypass
Medium
CVE-2023-27606
WP Reroute Email <= 1.4.6 - Cross-Site Request Forgery
Medium
CVE-2023-22696
Affiliate Links Lite <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-27614
Motor Racing League <= 1.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-45367
Custom Order Numbers for WooCommerce <= 1.4.0 - Cross-Site Request Forgery
Medium
CVE-2023-30498
Vimeotheque <= 2.2.1 - Reflected Cross-Site Scripting via 'view' and 'page'
Medium
CVE-2023-30751
Article Directory Redux <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27609
WP Roles at Registration <= 0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-28535
Paytm Payment Donation <= 2.2.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.