Medium
ad8b5fd2-ba92-4afa-9b4a-a95936b9a18d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-29439
FooGallery <= 2.2.35 - Reflected Cross-Site Scripting
Medium
CVE-2023-30476
Blogger Buzz <= 1.2.4 - Missing Authorization via activate_plugin
Medium
7a8c4232-2e1e-4c99-83d5-d70f7ca1c879
Stamped.io Product Reviews & UGC for WooCommerce <= 2.3.3 - Cross-Site Request Forgery
Medium
CVE-2023-30474
Ultimate Noindex Nofollow Tool II <= 1.3.3 - Cross-Site Request Forgery
Medium
CVE-2023-30475
Coupon Affiliates <= 5.4.5 - Reflected Cross-Site Scripting via 'page'
Medium
6c4a9092-fd49-42fe-a84d-a9f7fe708122
Stock Exporter for WooCommerce <= 1.1.0 - Cross-Site Request Forgery
Medium
CVE-2022-47149
Shortlinks by Pretty Links <= 3.4.0 - Cross-Site Request Forgery via route
Medium
CVE-2023-30479
Stamped.io Product Reviews & UGC for WooCommerce <= 2.3.2 - Missing Authorization
Medium
CVE-2023-30488
Featured Post Creative <= 1.2.7 - Missing Authorization via wpfp_update_featured_post
Medium
CVE-2023-30483
Watu Quiz <= 3.3.9.2 - Reflected Cross-Site Scripting via 'question'
Medium
CVE-2023-24406
Simple Popup Images <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-30478
Newsletters <= 4.8.8 - Cross-Site Request Forgery
Critical
CVE-2023-27844
Improper neutralization of SQL parameter in leurlrewrite for PrestaShop
High
CVE-2023-29207
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
Critical
CVE-2023-29199
vm2 Sandbox Escape vulnerability
Low
CVE-2023-29203
Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm
Critical
CVE-2023-29206
org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins
Critical
CVE-2023-29205
org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro
Medium
CVE-2023-29204
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
Critical
CVE-2023-29202
org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability
Critical
CVE-2023-29201
org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
Critical
CVE-2023-29511
xwiki-platform-administration-ui vulnerable to privilege escalation
Critical
CVE-2023-30537
org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.