High
CVE-2023-26303
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2023-0630
Slimstat Analytics <= 4.9.3.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-25985
WordPress Tooltips <= 8.2.5 - Multiple Cross-Site Request Forgery
High
CVE-2023-23861
GMAce <= 1.5.2 - Cross-Site Request Forgery via gmace_manager_client
Medium
CVE-2023-23872
GMAce <= 1.5.2 - Authenticated(Admin+) Directory Traversal
Medium
CVE-2023-25992
CM Answers <= 3.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25977
CPT – Speakers <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25965
Upload Resume <= 1.2.0 - Authenticated Sensitive Information Disclosure via resume_upload_form_list shortcode
Medium
CVE-2023-25458
TypeSquare Webfonts for ConoHa <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-24007
Admin Block Country <= 7.1.4 - Cross-Site Request Forgery via admin_block_country_initial_page
Medium
CVE-2023-25038
For the visually impaired <= 0.58 - Cross-Site Request Forgery to Plugin Settings Changes
Medium
CVE-2023-1089
Coupon Zen <= 1.0.5 - Cross-Site Request Forgery to Plugin Activation
Medium
CVE-2023-25982
Simple YouTube Responsive <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-26016
Simple Portfolio Gallery <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-26012
Custom Login Page <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25987
My YouTube Channel <= 3.23.3 - Cross-Site Request Forgery to Cache Deletion
Medium
CVE-2023-26010
WPMobile.App — Android and iOS Mobile Application <= 11.18 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-26009
Houzez Login Register <= 2.6.3 - Privilege Escalation
High
CVE-2022-45377
Drag and Drop Multiple File Upload for WooCommerce <= 1.0.8 - Cross-Site Request Forgery in upload and delete_file
Medium
CVE-2023-24416
All In One Favicon <= 4.7 - Authenticated(Admin+) Directory Traversal
Critical
CVE-2023-25813
Sequelize vulnerable to SQL Injection via replacements
High
CVE-2023-25570
Apollo has potential access control security issue in eureka
Medium
CVE-2023-25569
apollo-portal has potential CSRF issue
Medium
CVE-2023-0846
OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.