Medium
CVE-2023-25467
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-0968
Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-25474
About Me 3000 widget <= 2.2.6 - Cross-Site Request Forgery to Plugin Settings Update
High
CVE-2023-27450
Leyka <= 3.29.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-27445
Blog Floating Button <= 1.4.12 - Cross-Site Request Forgery
Medium
2b335807-f4d1-43b3-9e1b-2215eb00a3f8
WP Meteor Page Speed Optimization Topping <= 3.1.4 -Missing Authorization to Notice Dismissal
Medium
CVE-2023-0491
Schedulicity - Easy Online Scheduling <= 2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-27440
Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload
Medium
ghsa-cp47-r258-q626
Vega vulnerable to arbitrary code execution when clicking href links
High
CVE-2023-0264
Keycloak vulnerable to user impersonation via stolen UUID code
Medium
CVE-2022-2237
keycloak-connect contains Open redirect vulnerability in the Node.js adapter
Medium
CVE-2023-26486
Vega Expression Language `scale` expression function Cross Site Scripting
Medium
CVE-2023-26487
Vega has Cross-site Scripting vulnerability in `lassoAppend` function
Critical
CVE-2023-26475
xwiki-platform vulnerable to Remote Code Execution in Annotations
Medium
CVE-2022-38141
Sales Report Email for WooCommerce <= 2.8.0 - Missing Authorization for Email Functionality
Medium
CVE-2023-25491
JCH Optimize <= 3.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2022-47449
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD <= 3.1.5 - Reflected Cross-Site Scripting via cart_search
Medium
CVE-2023-27454
Rife Elementor Extensions & Templates <= 1.1.10 - Missing Authorization via import_templates
Medium
CVE-2023-23677
GTmetrix for WordPress <= 0.4.5 - Reflected Cross-Site Scripting via 'url'
Medium
c35bffb2-f805-48d6-938a-cb5142eac3b1
Fontiran <= 2.1 - Cross-Site Request Forgery
Medium
c0e58807-bccc-469f-82c3-a4bbf088a626
Yoast SEO <= 20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-26525
Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection
Medium
CVE-2022-46799
Easy Testimonial Slider and Form <= 1.0.15 - Unauthenticated Reflected Cross-Site Scripting via search_term
Medium
CVE-2023-24400
Cookie Notice & Compliance for GDPR / CCPA <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cookies_policy_link' Shortcodes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.