Medium
CVE-2023-26531
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-1022
WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'
Medium
CVE-2023-1028
WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'
Critical
CVE-2023-25970
Zendrop – Global Dropshipping <= 1.0.0 - Arbitrary File Upload
Medium
CVE-2023-26538
Chat Bee <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1027
WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'
Medium
CVE-2023-26542
phpinfo() WP <= 4.0 - Cross-Site Request Forgery
Medium
CVE-2023-1024
WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'
Medium
CVE-2023-0585
All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-0876
WP Meta SEO <= 4.5.2 - Missing Authorization in 'startProcess' to Arbitrary Redirect via 'update_link_redirect' task
Medium
CVE-2023-26536
Sp*tify Play Button for WordPress <= 2.05 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0586
All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-25960
Zendrop – Global Dropshipping <= 1.0.0 - SQL Injection in setMetaData
Medium
CVE-2023-25823
Update share links to use FRP instead of SSH tunneling
Critical
CVE-2022-4492
Undertow client not checking server identity presented by server certificate in https connections
Medium
CVE-2023-0044
Cross-site Scripting in Quarkus
Medium
CVE-2023-22476
MantisBT may expose private issues' summaries to unauthorized users
Critical
CVE-2023-22579
Unsafe fall-through in getWhereConditions
Medium
CVE-2023-0869
Cross Site Scripting in OpenNMS
Medium
CVE-2023-0868
OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting
Medium
CVE-2023-0867
OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting
Medium
CVE-2023-0815
OpenNMS has potential Insertion of Sensitive Information into Log File vulnerability
Medium
CVE-2023-25621
Improper Privilege Management in Apache Sling
High
CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.