Medium
CVE-2023-24389
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-25445
HappyFiles Pro <= 1.8.1 - Missing Authorization
Medium
CVE-2023-28986
Affiliates Manager <= 2.9.20 - Cross-Site Request Forgery via process_bulk_action()
Medium
CVE-2023-1324
Easy Forms for MailChimp <= 6.8.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-28751
Wp Ultimate Review <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b33bf55c-0397-44a2-8c18-ea5f8f1e2ec9
AI ChatBot <= 4.4.7 - Missing Authorization on openai_settings_option_callback
Medium
CVE-2023-1575
Mega Main Menu <= 2.2.2 - Authenticated (Administrator+) Cross-Site Scripting
Critical
CVE-2023-28662
Gift Cards (Gift Vouchers and Packages) <= 4.3.2 - Unauthenticated SQL Injection
Medium
CVE-2023-28987
Wp Ultimate Review <= 2.0.3 - Cross-Site Request Forgery
High
CVE-2023-1509
GMAce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary File Modification (Creation/Overwrite/Deletion)
Medium
CVE-2023-25446
HappyFiles Pro <= 1.8.1 - Missing Authorization to Arbitrary File Deletion
Medium
CVE-2023-1414
WP VR <= 8.2.9 - Missing Authorization
Medium
CVE-2023-28989
Happy Addons for Elementor <= 3.8.2 - Cross-Site Request Forgery via handle_optin_optout()
Medium
057ab824-8071-4c3c-9a57-f9a0043a9ad5
Feed Them Social <= 4.0.7 - Cross-Site Request Forgery
Medium
CVE-2023-25722
Veracode Scan Jenkins Plugin vulnerable to information disclosure
Medium
CVE-2023-25721
Veracode Scan Jenkins Plugin vulnerable to information disclosure
High
CVE-2022-36060
matrix-react-sdk Prototype pollution vulnerability
High
CVE-2022-36059
matrix-js-sdk Prototype Pollution vulnerability
Critical
CVE-2023-28326
Apache OpenMeetings missing authentication and can allow user impersonation
Critical
CVE-2023-20860
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch
Medium
f670b93e-da2e-43e7-a28a-6cacba4df3a1
Simple Author Box <= 2.50 - Cross-Site Request Forgery via save_user_profile
Medium
CVE-2023-1623
Custom Post Type UI <= 1.13.4 - Cross-Site Request Forgery to Sensitive Information Exposure
Medium
CVE-2023-24392
Full Width Banner Slider Wp <= 1.1.7 - Reflected Cross-Site Scripting via search_term
Medium
CVE-2022-41635
Advanced Shipment Tracking for WooCommerce <= 3.5.2 - Cross-Site Request Forgery via paginate_shipping_provider_list and filter_shipping_provider_list
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.