High
CVE-2023-29003
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2020-20913
Ming-Soft MCMS vulnerable to SQL injection
Medium
CVE-2020-19697
Pandao Editor.md vulnerable to cross-site scripting (XSS) in iframe src parameter
Medium
CVE-2020-19698
Pandao Editor.md vulnerable to cross-site scripting (XSS) in editor parameter
Medium
CVE-2020-19850
Directus API vulnerable to denial of service
Medium
CVE-2023-1703
pimcore is vulnerable to cross-site scripting in Composite indices key field
Medium
CVE-2023-29236
Outdoor <= 3.9.6 - Reflected Cross-Site Scripting
High
CVE-2023-0924
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-25057
Libsyn Publisher Hub <= 1.3.2 - Sensitive Information Exposure
Medium
CVE-2023-1021
Amr Ical Events Lists <= 6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1840
Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25051
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery
Critical
CVE-2023-26860
Improper neutralization of SQL parameter in lgbudget module for PrestaShop
Medium
CVE-2023-28851
Silverstripe Form Capture vulnerable to stored cross-site-scripting
Medium
CVE-2023-28850
Pimcore Perspective Editor vulnerable to stored cross-site scripting (XSS) in perspective name
High
CVE-2023-28836
Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views
Medium
CVE-2023-28837
Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files
High
CVE-2023-26269
Apache James server's JMX management service vulnerable to privilege escalation by local user
Medium
CVE-2023-1129
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Manipulation
High
CVE-2023-1420
Ajax Search Lite <= 4.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-29094
Product page shipping calculator for WooCommerce <= 1.3.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1624
WPCode <= 2.0.8 - Cross-Site Request Forgery
Medium
df413b9d-5c22-4276-a11b-4f193c48740d
HT Builder <= 1.2.9 - Cross-Site Request Forgery via plugin_activation
Critical
CVE-2023-1020
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.