Medium
CVE-2023-1469
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-44626
SEO Plugin by Squirrly SEO <= 12.1.20 - Missing Authorization
Medium
CVE-2023-1472
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery
High
CVE-2023-1471
WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-24376
WP Simple Events <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23894
Surbma | GDPR Proof Cookie Consent & Notice Bar <= 17.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-45065
SEO Plugin by Squirrly SEO <= 12.1.20 - Reflected Cross-Site Scripting via 'page' and 'tab'
Medium
CVE-2023-1470
eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47431
Open RDW kenteken voertuiginformatie <= 2.0.14 - Reflected Cross-Site Scripting via open_data_rdw_kenteken
Medium
CVE-2023-28532
Real Estate Directory <= 1.0.5 - Cross-Site Request Forgery via rdm_activate_plugin
Medium
CVE-2023-27494
Streamlit publishes previously-patched Cross-site Scripting vulnerability
Medium
ghsa-2xpm-cmvw-3jcc
Reflected XSS in Application Logger module
Medium
CVE-2023-1429
Cross-site Scripting (XSS) in Document Types
Medium
ghsa-rrwm-8wqm-gwgv
Cross-site Scripting (XSS) - stored in Print Documents
High
CVE-2023-28104
DDOS attack on graphql endpoints
Medium
CVE-2023-28155
Server-Side Request Forgery in Request
Medium
CVE-2023-27095
Exposure of Sensitive Information in OpenGoofy Hippo4j
Medium
CVE-2023-1426
WP Tiles <= 1.1.2 - Authenticated(Subscriber+) Sensitive Information Exposure
Medium
CVE-2023-28416
Chankhe <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
Medium
CVE-2023-28418
Mediciti Lite <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-1431
WP Simple Shopping Cart <= 4.6.3 - Information Disclosure
Medium
CVE-2023-28493
Newsmag <= 2.4.4 - Reflected Cross-Site Scripting
Medium
d6516fc0-4ef8-423b-9cdb-a275996fd98b
WP Basic Elements <= 5.2.15 - Missing Authorization to Plugin Settings Update via wpbe_save_settings
Medium
c3508b46-6920-48b9-9acb-620ea34e07e2
Branda – White Label WordPress <= 3.4.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.