Medium
CVE-2023-1435
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2023-1196
Advanced Custom Fields <= 6.0.7 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2023-29172
PropertyHive <= 1.5.46 - Reflected Cross-Site Scripting via 'merge_ids'
Medium
CVE-2023-28993
Albo Pretorio Online <= 4.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-29170
Product Enquiry for WooCommerce <= 2.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0388
Random Text <= 0.3.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0899
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated Stored Cross-Site Scripting
Medium
1ddcd2eb-fd7a-48b7-b9ea-3632d49e9734
MasterStudy LMS WordPress Plugin <= 2.9.34 - Missing Authorization via wp_ajax_stm_wpcfto_get_settings
Medium
CVE-2023-1090
SMTP Mailing Queue <= 1.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-29171
Magic Post Thumbnail <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-1126
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2023-29098
CopySafe Web Protection <= 3.13 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2023-28678
Jenkins Cppcheck Plugin vulnerable to stored cross-site scripting (XSS)
Medium
CVE-2023-28671
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
High
CVE-2023-28676
Jenkins Convert To Pipeline Plugin vulnerable to cross-site request forgery
High
CVE-2023-28669
Jenkins JaCoCo Plugin vulnerable to Stored Cross-site Scripting
Medium
CVE-2023-28668
Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled
High
CVE-2023-28677
Jenkins Convert To Pipeline Plugin vulnerable to command injection
Medium
CVE-2023-28675
Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections
Medium
CVE-2023-28672
Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture
High
CVE-2023-28681
Jenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28680
Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28679
Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting
Medium
CVE-2023-28674
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.