Medium
CVE-2023-1761
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-1741
jeecg-boot vulnerable to SQL injection
Medium
CVE-2023-28991
Order date time for WooCommerce <= 3.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47161
Health Check & Troubleshooting <= 1.5.1 - Cross-Site Request Forgery via health_check_troubleshoot_get_captures
Medium
CVE-2023-23801
Really Simple Google Tag Manager <= 1.0.6 - Cross-Site Request Forgery via plugin_activation
High
CVE-2023-28992
Coupon Affiliates <= 5.4.3 - Unauthenticated Stored Cross-Site Scripting
Medium
9a999044-5d4a-4415-a3b9-28c564e63a25
Responsive Vertical Icon Menu <= 1.5.8 - Reflected Cross-Site Scripting via 'id'
Medium
98730677-200b-4b1a-8568-7af8b2b0e94b
Welcome Bar <= 2.0.3 - Missing Authorization
Medium
82a26836-44fc-47cf-ad09-bd3d264e8635
Welcome Bar <= 2.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-29093
Conditional cart fee / Extra charge rule for WooCommerce extra fees <= 1.0.96 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
71548a7f-43a5-4f71-8add-45f675e8aa66
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23812
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
0b3fa78c-d97f-43bf-b3e9-47d6aa41b458
Advanced Local Pickup for WooCommerce <= 1.5.2 - Cross-Site Request Forgery
Critical
CVE-2023-28843
Improper neutralization of SQL parameter in PayPal module for PrestaShop 1.6 and 1.5
Critical
CVE-2023-28462
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
High
CVE-2023-28427
Prototype pollution in matrix-js-sdk (part 2)
Medium
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Critical
CVE-2023-1712
Use of hard-coded, security-relevant constants in deepset-ai/haystack
High
CVE-2023-28935
Apache UIMA DUCC allows remote code execution
Medium
CVE-2023-26117
angular vulnerable to regular expression denial of service via the $resource service
Medium
CVE-2023-26116
angular vulnerable to regular expression denial of service via the angular.copy() utility
Medium
CVE-2023-26118
angular vulnerable to regular expression denial of service via the <input type="url"> element
Medium
CVE-2023-23792
Swatchly – WooCommerce Variation Swatches for Products <= 1.2.0 - Cross-Site Request Forgery via plugin_activation
Medium
efc53d78-a664-48d0-a752-00c56b3f792f
No CAPTCHA reCAPTCHA for WooCommerce <= 1.2.6 - Missing Authorization to Notification Dismissal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.