Medium
7d500729-3b1a-4ece-81de-4c1f9afbf798
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-47139
WP Basic Elements <= 5.2.15 - Cross-Site Request Forgery via wpbe_save_settings
Medium
CVE-2023-25052
Yandex.News Feed by Teplitsa <= 1.12.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28166
Tags Cloud Manager <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-28169
Easy Event calendar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47429
Coming Soon Landing Page and Maintenance Mode WordPress Plugin <= 2.2.0 - Missing Authorization
Medium
CVE-2023-27633
Customify <= 2.10.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-47448
xili-tidy-tags <= 1.12.03 - Cross-Site Request Forgery
Medium
CVE-2022-47135
Chronoforms <= 7.0.9 - Cross-Site Request Forgery
Medium
CVE-2023-0605
Auto Rename Media On Upload <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47138
LOGIN AND REGISTRATION ATTEMPTS LIMIT <= 2.1 - Cross-Site Request Forgery
High
CVE-2023-24420
Admin side data storage for Contact Form 7 <= 1.1.2 - Stored Cross-Site Scripting
Medium
CVE-2023-28173
Google XML Sitemap for Images <= 2.1.3 - Cross-Site Request Forgery via image_sitemap_generate
Critical
CVE-2023-25206
Multiple improper neutralization of SQL parameters in ws_productreviews module for PrestaShop
High
CVE-2023-27490
Missing proper state, nonce and PKCE checks for OAuth authentication
Medium
CVE-2023-27577
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files
Medium
CVE-2023-27580
Password Shucking Vulnerability
High
CVE-2022-43441
sqlite vulnerable to code execution due to Object coercion
High
CVE-2023-1367
Code Injection in alextselegidis/easyappointments
High
CVE-2023-28154
webpack JS package <= 5.75.0 - Sandbox Bypass
Medium
CVE-2023-27626
Stock Ticker <= 3.23.0 - Missing Authorization via AJAX actions
Medium
CVE-2023-28171
Brilliance <= 1.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-27612
Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-27625
Site Reviews <= 6.5.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.