Medium
CVE-2022-46795
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-25456
Klaviyo <= 3.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-1372
WH Testimonials <= 3.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-46794
WooCommerce Weight Based Shipping <= 5.4.1 - Cross-Site Request Forgery leading to Plugin Settings Changes
Medium
CVE-2023-1374
Solidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25043
Data Tables Generator by Supsystic <= 1.10.25 - Missing Authorization
Medium
CVE-2022-47180
Kopa Framework <= 1.3.5 - Cross-Site Request Forgery
High
CVE-2023-1124
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url
Medium
CVE-2023-25452
CMS Press <= 0.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-45835
PhonePe Payment Solutions <= 1.0.15 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2023-0820
User Role by BestWebSoft <= 1.6.6 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2023-27619
Regina Lite <= 2.0.7 - Reflected Cross-Site Scripting
Medium
7945110e-2a9d-4e0e-b0e8-77c16694993b
Dynamics 365 Integration <= 1.3.12 - Cross-Site Request Forgery via wp_ajax_wpcrm_log
Medium
CVE-2023-28172
WP Google Map Plugin <= 4.4.2 - Cross-Site Request Forgery via delete()
Medium
CVE-2023-27611
Reusable Blocks Extended <= 0.9 - Cross-Site Request Forgery via reblex_reusable_screen_block_pattern_registration
Medium
CVE-2023-27620
Robo Gallery <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-1377
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-45812
Exxp <= 2.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-27629
Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attribute
High
CVE-2023-27634
Intrepidity <= 1.5.1 - Cross-Site Request Forgery via mytheme_add_admin
Critical
CVE-2023-29629
Blind SQL injection vulnerability in Jms Theme Layout (jmsthemelayout) PrestaShop module
Critical
CVE-2023-29631
Unrestricted upload vulnerability in Jms Slider (jmsslider) PrestaShop module
Critical
CVE-2023-29632
Blind SQL injection vulnerability in Jms Page Builder (jmspagebuilder) PrestaShop module
Critical
CVE-2023-29630
Blind SQL injection vulnerability in Jms Vertical MegaMenu (jmsvermegamenu) PrestaShop module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.