Medium
CVE-2023-0823
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-0816
Formidable Forms <= 6.0.1 - IP Spoofing via HTTP header
High
CVE-2020-36666
Multiple E-plugins (Various Versions) - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2023-7288
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'update_profile_preference'
High
CVE-2023-0955
WP Statistics <= 13.2.16 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-7287
Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'pt_cancel_subscription'
High
CVE-2023-24763
Multiple improper neutralization of SQL parameters in XenForum module for PrestaShop
Medium
CVE-2023-1069
Complianz - GDPR/CCPA Cookie Consent <= 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2021-4329
json-logic-js Command Injection vulnerability
Medium
CVE-2023-0734
Wallabag Improper Authorization vulnerability
Medium
CVE-2023-27437
Event Espresso 4 Decaf <= 4.10.44.decaf - Feature Bypass
Medium
CVE-2023-27431
Big Store <= 1.9.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Medium
CVE-2023-27444
DecaLog <= 3.7.0 - Cross-Site Request Forgery via get_settings_page
Medium
CVE-2023-27429
Jetpack CRM <= 5.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-23929
vantage6 refresh tokens do not expire
Medium
CVE-2023-26492
Directus vulnerable to Server-Side Request Forgery On File Import
Medium
CVE-2023-26056
xwiki contains Incorrect Authorization
High
CVE-2023-26480
XWiki-Platform vulnerable to stored Cross-site Scripting via the HTML displayer in Live Data
Medium
CVE-2023-26479
xwiki vulnerable to Improper Handling of Exceptional Conditions
Medium
CVE-2023-26478
xwiki contains Exposed Dangerous Method or Function
Critical
CVE-2023-26477
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
Medium
CVE-2023-26470
XWiki Platform subject to Uncontrolled Resource Consumption
Critical
CVE-2023-26471
XWiki Platform users may execute anything with superadmin right through comments and async macro
Critical
CVE-2023-26055
XWiki Platform may allow privilege escalation to programming rights via user's first name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.