Medium
CVE-2023-0363
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-28664
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Relected Cross-Site Scripting via 'tax_name'
Medium
CVE-2023-28666
InPost Gallery <= 2.1.4.1 - Reflected Cross-Site Scripting via 'imgurl'
High
CVE-2023-0983
Stylish Cost Calculator < 7.9.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-28536
Branded Social Images <= 1.1.0 - Missing Authorization leading to Unauthenticated Plugin Settings Updates
Medium
CVE-2023-0874
Klaviyo <= 3.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-1473
Slider, Gallery, and Carousel by MetaSlider <= 3.29.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-1122
Simple Giveaways <= 2.45.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Form, Prize, and Sharing Method Fields
Medium
CVE-2023-27618
Store Locator WordPress <= 1.4.9 - Authenticated (Editor+) Stored Cross-Site Scripting via 'category_name', 'description', 'description_2' parameters
Critical
CVE-2023-28667
Lead Generated <= 1.23 - Unauthenticated PHP Object Injection
Medium
CVE-2023-0546
FluentForms <= 4.3.24 - Authenticated(Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-23884
Kanban Boards for WordPress <= 2.5.21 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2021-46877
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
High
CVE-2023-26113
Collection.js vulnerable to Prototype Pollution
Critical
CVE-2023-28115
PHAR deserialization allowing remote code execution
High
CVE-2023-28108
Improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
Medium
CVE-2023-28106
Cross-site Scripting (XSS) in UrlSlug Data type
Medium
CVE-2023-1463
Improper Authorization in nilsteampassnet/teampass
Critical
CVE-2023-1454
jeecg-boot SQL Injection vulnerability
High
CVE-2023-22710
Return and Warranty Management System for WooCommerce <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-28534
WP Job Portal <= 2.0.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-24408
Ecwid Shopping Cart <= 6.11.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-1172
Bookly <= 21.5 - Unauthenticated Stored Cross-Site Scripting via Name
Medium
CVE-2023-24405
Contact Form 7 – PayPal & Stripe Add-on <= 1.9.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.