Medium
CVE-2022-45819
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
5778ba3d-6670-47ad-ae65-50b6fb8e5db0
Real Estate 7 Theme <= 3.3.4 - Unauthenticated Arbitrary Email Sending
Medium
CVE-2023-1323
Easy Forms for Mailchimp <= 6.8.8 - Authenticated (Administrator+) Cross-Site Scripting via Form Name
Critical
CVE-2023-25207
Multiple improper neutralization of SQL parameters in DPD France module for PrestaShop
Critical
CVE-2023-24782
SQL Injection in Funadmin
Critical
CVE-2023-24773
SQL Injection in Funadmin
Unrated
drupal-contrib-2023-009
drupal/gutenberg - SA-CONTRIB-2023-009
High
CVE-2023-27480
XWiki Platform vulnerable to data leak via Improper Restriction of XML External Entity Reference
Critical
CVE-2023-27479
org.xwiki.platform:xwiki-platform-panels-ui vulnerable to Eval Injection
Medium
CVE-2023-27481
Directus vulnerable to extraction of password hashes through export querying
Critical
CVE-2023-23638
Apache Dubbo vulnerable to Deserialization of Untrusted Data
Critical
CVE-2023-1269
Easy!Appointments uses hard-coded credentials
Critical
CVE-2023-24780
SQL Injection in Funadmin
High
CVE-2023-27476
OWSLib vulnerable to XML External Entity (XXE) Injection
Medium
CVE-2023-27413
W4 Post List <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'w4pl[no_items_text]'
Medium
CVE-2023-0399
Image Over Image For WPBakery Page Builder <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23668
GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode
Medium
cb7ec7ad-797b-4a5c-9b1c-31284083faef
GiveWP <= 2.25.1 - Cross-Site Request Forgery via save
Medium
CVE-2023-25450
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush
Medium
a9939ffe-a5d5-45cb-b673-665acf1ff09d
GiveWP <= 2.25.1 - Cross-Site Request Forgery via process_bulk_action
Medium
CVE-2023-27631
Daily Prayer Time <= 2023.03.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-27632
Daily Prayer Time <= 2023.03.08 - Cross-Site Request Forgery
Medium
CVE-2023-25486
Clone <= 2.3.7 - Missing Authorization via wp_ajax_tifm_save_decision
Medium
CVE-2023-27418
Side Menu Lite <= 4.0 - Cross-Site Request Forgery to Item Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.