Medium
CVE-2023-25055
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-47445
Be POPIA Compliant <= 1.2.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-28165
Backup Bank: WordPress Backup Plugin <= 4.0.28 - Missing Authorization via post_user_feedback_backup_bank
Medium
CVE-2023-24395
Contact Form 7 Redirect & Thank You Page <= 1.0.3 - Cross-Site Request Forgery via cf7rl_admin_table
Medium
CVE-2022-47446
Store Locator <= 3.98.7 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-47434
PB SEO Friendly Images <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47437
WSB Brands <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via $logo
Medium
CVE-2023-28491
Slideshow Gallery LITE <= 1.7.6 - Authenticated(Admin+) SQL Injection
Medium
CVE-2023-1282
Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard <= 5.0.6.3 and <= 2.11.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-28417
Dynamics 365 Integration <= 1.3.12 - Missing Authorization via wp_ajax_wpcrm_log & wp_ajax_wpcrm_log_verbosity
Medium
CVE-2023-28499
Slide Anything <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-28497
Slideshow Gallery LITE <= 1.7.6 - Cross-Site Request Forgery via admin_slides
Critical
CVE-2023-27569
-[CVE-2023-27570] Improper neutralization of SQL parameters in Profileo : Tracking et Conversions (eo_tags) module for PrestaShop
High
CVE-2023-25617
SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling
Medium
CVE-2023-24279
ONOS vulnerable to reflected cross-site scripting
Medium
CVE-2023-28168
WordPress Console <= 0.3.9 - Missing Authorization via reload.php
Medium
CVE-2023-23707
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG files
Medium
CVE-2023-1400
Modern Events Calendar lite < 6.10.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-47597
Popup Maker <= 1.17.1 - Sensitive Data Exposure via debug log file
Medium
CVE-2023-28421
WordPress Email Marketing Plugin – WP Email Capture <= 3.10 - Information Exposure via wp_email_capture_options_process
Medium
CVE-2022-47447
WP-Advanced-Search <= 3.3.8 - Cross-Site Request Forgery leading to Plugin Settings Updates
Medium
98e0d103-2369-4c6a-93ae-6be2a1770bae
Dynamics 365 Integration <= 1.3.12 - Cross-Site Request Forgery via wp_ajax_wpcrm_log_verbosity
Medium
CVE-2023-28423
Modern Footnotes <= 1.4.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28167
CF7 Invisible reCAPTCHA <= 1.3.3 - Cross-Site Request Forgery via vsz_cf7_invisible_recaptcha_page
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.