High
CVE-2023-22719
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-25449
cformsII <= 15.0.4 - Cross-Site Request Forgery leading to Settings Updates
Medium
CVE-2023-27417
Affiliate Super Assistent <= 1.5.1 - Cross-Site Request Forgery to Settings Update and Cache Clearing
Medium
533f71d5-823d-45eb-8ecf-76afafd2a5d3
Popup Maker <= 1.18.0 - Cross-Site Request Forgery via init
Medium
3d12d692-231b-4e15-a119-80fd74566af4
Webmention <= 4.0.8 - Reflected Cross-Site Scripting via 'replytocom'
Medium
343cbdda-2ec5-437f-b563-96c61663314d
Updraft Plus <= 1.22.24 - Information Disclosure via updraft_ajaxrestore
Medium
314d3e0c-ba29-4795-a646-40e0acfc3405
Clone <= 2.3.7 - Cross-Site Request Forgery via wp_ajax_tifm_save_decision
Medium
CVE-2023-23802
HT Easy GA4 ( Google Analytics 4 ) <= 1.0.6 - Cross-Site Request Forgery via plugin_activation
Medium
2a0381b1-9b63-41cb-8125-d22274b98867
GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown
Medium
CVE-2022-40312
GiveWP <= 2.25.1 - Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler
Medium
2253cb38-3688-4e4d-afd1-582c8743c89a
301 Redirects - Easy Redirect Manager <= 2.72 - Cross-Site Request Forgery via dismiss_notice
Medium
CVE-2023-1112
Drag and Drop Multiple File Upload PRO <= 2.10.9 - Directory Traversal
Medium
CVE-2023-27414
Popup box <= 3.4.4 - Reflected Cross-Site Scripting via 'ays_pb_tab' Parameter
High
CVE-2023-27474
directus vulnerable to HTML Injection in Password Reset email to custom Reset URL
Medium
CVE-2022-41918
OpenSearch has issue with fine-grained access control of indices backing data streams
High
CVE-2023-27522
Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling
Critical
CVE-2023-24775
SQL Injection in Funadmin
Medium
CVE-2023-25806
OpenSearch has time discrepancy in authentication responses
Critical
CVE-2023-24781
SQL Injection in Funadmin
Medium
CVE-2021-36399
Moodle Cross-site Scripting vulnerability
Medium
CVE-2021-36398
Moodle Cross-site Scripting vulnerability
Medium
CVE-2021-36397
Moodle has Incorrect Default Permissions
Medium
CVE-2021-36401
Moodle vulnerable to Stored Cross-site Scripting
Medium
CVE-2021-36403
Moodle has a Hidden Functionality vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.