Medium
CVE-2023-28429
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-1515
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects
Medium
CVE-2023-1517
Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents
High
CVE-2023-27586
CairoSVG improperly processes SVG files loaded from external resources
High
CVE-2023-26513
Apache Sling Resource Merger has Excessive Iteration vulnerability
Medium
CVE-2023-23863
TreePress – Easy Family Trees & Ancestor Profiles <= 2.0.22 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'post_title' parameter
Medium
f3944b2d-c431-4a53-b4e2-740480e746d6
Cyberus Key <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0893
Time Sheets <= 1.29.2 - Authenticated(Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-1478
Hummingbird <= 3.4.1 - Unauthenticated Path Traversal
High
CVE-2023-1406
Crocoblock JetEngine <= 3.1.3 - Authenticated(Author+) Arbitrary File Upload to Remote Code Execution
High
CVE-2023-28660
Events Made Easy <= 2.3.17 - Authenticated (Subscriber+) SQL Injection via 'search_name'
Medium
CVE-2023-23664
ConvertBox Auto Embed WordPress plugin <= 1.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-28422
Event Manager for WooCommerce <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'mep_get_option' function
Medium
CVE-2023-28620
Cyberus Key <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'uid' in 'cyberkey_settings' Plugin Setting
Medium
CVE-2023-23897
Simple Mobile URL Redirect <= 1.7.2 - Cross-Site Request Forgery leading to Mobile Redirect Updates
Medium
bb74a917-2dfb-4229-a72a-9c3d1f9a6324
GamiPress – Youtube integration <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23869
Google XML Sitemap for Mobile <= 1.6.1 - Cross-Site Request Forgery via mobile_sitemap_generate
Medium
CVE-2023-0423
WordPress Amazon S3 Plugin <= 1.5 - Reflected Cross-Site Scripting
High
CVE-2023-28661
WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection via 'value'
Medium
CVE-2023-0157
All-In-One Security (AIOS) <= 5.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23883
WP Content Filter – Censor All Offensive Content From Your Site <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1121
Simple Giveaways <= 2.45.0 - Authenticated(Admin+) Stored Cross-Site Scripting via form fields
Medium
CVE-2023-1120
Simple Giveaways <= 2.45.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings
High
CVE-2023-1425
Groundhogg <= 2.7.9.3 - Authenticated (Administrator)+ SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.