Critical
CVE-2023-26472
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-26474
XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
High
CVE-2023-26476
XWiki Platform packages Expose Sensitive Information to an Unauthorized Actor
Medium
CVE-2023-26473
Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vm
Medium
CVE-2023-23927
Craft CMS Stored Cross-site Scripting Injection Vulnerability
Medium
CVE-2023-26488
OpenZeppelin Contracts contains Incorrect Calculation
High
CVE-2023-27560
phpseclib Infinite Loop vulnerability
Medium
CVE-2023-1160
Cockpit Uses Platform-Dependent Third Party Components
High
CVE-2022-40700
CSSTidy - Server-Side Request Forgery
Medium
CVE-2023-0772
OptinMonster <= 2.12.1 - Authenticated (Subscriber+) Sensitive Information Disclosure via Shortcode
Medium
CVE-2023-27436
Elegant Custom Fonts <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-27439
New Adman <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27434
Classic Editor and Classic Widgets <= 1.2.5 - Cross-Site Request Forgery via render_settings_page
Medium
CVE-2023-27441
New Adman <= 1.6.8 - Cross-Site Request Forgery via plugin_menu
Medium
CVE-2022-40699
Yet Another Stars Rating <= 3.1.2 - Authenticated (Subscriber+) Cross-Site Scripting via Shortcodes
Medium
CVE-2023-27438
WP Translitera <= p1.2.5 - Cross-Site Request Forgery
Medium
CVE-2023-27442
Leyka <= 3.29.2 - Cross-Site Request Forgery
Medium
CVE-2023-25451
CPO Content Types <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-27432
Manage Upload Limit <= 1.0.4 - Reflected Cross-Site Scripting via upload_limit
Medium
CVE-2023-25034
WP Clean Up <= 1.2.3 - Cross-Site Request Forgery via wp_clean_up_optimize
Medium
CVE-2023-25021
FareHarbor for WordPress <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
CVE-2023-0219
FluentSMTP <= 2.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Email Logs
Medium
CVE-2023-0844
Namaste! LMS <= 2.5.9.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'accept_other_payment_methods', 'other_payment_methods' Parameters
Medium
CVE-2023-27449
Total Poll Lite <= 4.8.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.