High
CVE-2023-27296
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2023-28867
GraphQL Java vulnerable to stack consumption
Medium
CVE-2023-28778
Pagination by BestWebSoft <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27922
Newsletter <= 7.6.8 - Reflected Cross-Site Scripting
High
CVE-2023-0889
Themeflection Numbers <= 1.8.1 - Authenticated(Subscriber+) Privilege Escalation via tf_numb_save_licenses
Medium
CVE-2023-25966
Filebird <= 5.1.4 - Missing Authorization via resAdminPermissionsCheck
High
CVE-2023-0765
Gallery by BestWebSoft <= 4.6.9 - Authenticated (Author+) SQL Injection
High
CVE-2022-47444
ProfilePress <= 4.5.3 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-28789
Contact Forms by Cimatti <= 1.5.4 - Reflected Cross-Site Scripting via 'form-field-id', 'edit-fid', 'id', 'name', 'type', 'description' Parameters
High
CVE-2023-28781
WordPress Contact Forms by Cimatti <= 1.5.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-28750
Albo Pretorio Online <= 4.6 - Reflected Cross-Site Scripting via 'Errore'
High
CVE-2023-1381
WP Meta SEO <= 4.5.4 - Authenticated (Author+) PHAR Deserialization
Medium
CVE-2023-0764
Gallery by BestWebSoft <= 4.6.9 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2023-28788
Advanced Page Visit Counter <= 6.4.2 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2022-46808
ARMember <= 3.4.11 - Unauthenticated SQL Injection
Medium
CVE-2023-28784
Contest Gallery <= 21.1.2 - Reflected Cross-Site Scripting
High
CVE-2023-0277
WC Fields Factory <= 4.1.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-28776
Continuous Image Carousel With Lightbox <= 1.0.15 - Reflected Cross-Site Scripting via search_term, order_by and order_pos
Medium
CVE-2023-1325
Easy Forms for MailChimp <= 6.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-28774
Review Stream <= 1.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1554
Quick Paypal Payments <= 5.7.26.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28792
Continuous Image Carousel With Lightbox <= 1.0.15 - Reflected Cross-Site Scripting via search_term, order_by and order_pos
Medium
CVE-2023-28786
iThemes Security <= 8.1.4 - Open Redirection via redirect_to_https
Medium
CVE-2023-28858
redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a pipeline operation), and can send
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.