High
CVE-2022-46850
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-46864
Woocommerce Custom Checkout Fields Editor With Drag & Drop <= 0.1 - Reflected Cross-Site Scripting via 'tab'
Medium
CVE-2022-46858
Product Specifications for Woocommerce <= 0.6.0 - Reflected Cross-Site Scripting via Arbitrary Query String Parameter
Medium
CVE-2023-0418
Video Central for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0424
MS-Reviews <= 1.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
5c51f55f-6e8c-467c-999b-4e6a1a6f7bbc
WC Fields Factory <= 4.1.5 - Authenticated(Subscriber+) SQL Injection
High
CVE-2023-3124
Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option
Medium
CVE-2023-23993
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-0420
Custom Post Type and Taxonomy GUI Manager <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-38077
WP OnlineSupport, Essential Plugin Popup Anything <= 2.2.1 - Cross Site Request Forgery
Medium
CVE-2023-0589
WP Image Carousel WordPress - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
07c0b4c5-d76e-4bdc-87d1-3144a1466c77
SupportCandy <= 3.1.3 - Sensitive Data Exposure
Medium
CVE-2022-40702
Advanced Local Pickup for WooCommerce <= 1.5.2 - Missing Authorization
Medium
0472804e-00cc-4c4c-97aa-86f433f65782
Maps Widget for Google Maps <= 4.23 - Cross-Site Request Forgery via dismiss_notice
Critical
CVE-2023-26858
Improper neutralization of SQL parameter in faqs module for PrestaShop
Medium
CVE-2023-28628
lambdaisland/uri `authority-regex` returns the wrong authority
High
CVE-2023-28638
Snappier vulnerable to buffer overrun due to improper restriction of operations within the bounds of a memory buffer
Medium
CVE-2023-28640
Apiman vulnerable to permissions bypass due to missing check on API key URL
Medium
CVE-2023-28604
Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting
Medium
CVE-2023-22251
Magento Open Source allows Incorrect Authorization
Medium
CVE-2023-22250
Magento Open Source allows Improper Access Control
High
CVE-2023-22247
Magento Open Source allows XML Injection
Medium
CVE-2023-25661
TensorFlow Denial of Service vulnerability
Medium
CVE-2023-27096
Hippo4j allows attacker to obtain sensitive info via ConfigVerifyController function of Tenant Management module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.