High
CVE-2023-27087
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2018-25082
weixin-python XML External Entity vulnerability
High
CVE-2023-1545
Teampass SQL Injection vulnerability
Medium
CVE-2023-25469
Easy Table of Contents <= 2.0.45.2 - Missing Authorization via eztoc_reset_options_to_default
Medium
CVE-2022-47439
Open Graphite <= 1.6.0 - Reflected Cross-Site Scripting via topic parameter
Medium
ce6ea115-941e-482f-a2a4-95293ff10a69
Contact Form Email <= 1.3.31 - Cross-Site Request Forgery to Feedback Submission
Medium
CVE-2023-22695
Custom Field Template <= 2.5.8 - Cross-Site Request Forgery via Plugin Options Update
Medium
CVE-2023-25478
Weather Station <= 3.8.11 - Cross-Site Request Forgery
Medium
CVE-2023-22694
BigContact <= 1.5.8 - Cross-Site Request Forgery leading to Plugin Settings Updates
Medium
CVE-2023-1427
Photo Gallery by 10Web <= 1.8.14 - Authenticated (Administrator+) Directory Traversal
Medium
CVE-2023-28618
Enhanced Plugin Admin <= 1.16 - Cross-Site Request Forgery via epa_options_page
Medium
CVE-2023-24372
Simple Custom Author Profiles <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23732
Disqus Conditional Load <= 11.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings.
High
CVE-2023-27459
User Registration <= 2.3.2.1 - PHP Object Injection
Medium
CVE-2023-28689
JS Job Manager <= 2.0.0 - Missing Authorization
Medium
CVE-2023-23733
Lazy Social Comments <= 2.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Options
Medium
CVE-2023-23647
Team Member <= 4.4 - Authenticated (Editor+) Stored Cross-Site Scripting via new_style_name
Medium
CVE-2023-28695
VigilanTor <= 1.3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23862
Vertical scroll recent post <= 14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-1331
Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin Reset
Medium
CVE-2023-23734
Userlike <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-27637
[CVE-2023-27638][CWE-89] Improper neutralization of SQL parameters in module PrestaShop Custom Product Designer (tshirtecommerce) for PrestaShop
High
CVE-2023-28118
kaml has potential denial of service while parsing input with anchors and aliases
High
CVE-2023-28426
SVG Sanitizer library <= 0.15.4 - Cross-Site Scripting Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.