High
ghsa-q79m-c546-2g63
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
ghsa-j9q2-f9q7-jhgq
CakePHP SecurityComponent cross form submission issue
Medium
CVE-2023-22734
Shopware has Improper Input Validation issue in newsletter subscription
Low
CVE-2023-22732
Shopware has Insufficient Session Expiration in Administration
Medium
ghsa-829q-v5g8-hhxc
CakePHP has incorrect Cross-Site Request Forgery validation
Critical
CVE-2020-23256
electerm allows unauthorized users to execute arbitrary commands
Critical
CVE-2021-26642
XpressEngine vulnerable to Unrestricted Upload of File with Dangerous Type
Low
CVE-2023-22733
Shopware's log module vulnerable to Improper Output Neutralization
Critical
CVE-2023-22727
CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection
Medium
CVE-2023-0323
pimcore is vulnerable to cross-site scripting via "title field " in data objects
Medium
CVE-2023-0410
@builder.io/qwik vulnerable to Cross-site Scripting
Medium
CVE-2023-23976
RegistrationMagic <= 5.1.9.2 - Improper Authorization to Price Change
Medium
CVE-2023-23983
Responsive Vertical Icon Menu <= 1.5.8 - Cross-Site Request Forgery
Medium
CVE-2023-23989
RegistrationMagic <= 5.1.9.2 - Missing Authorization to Unauthenticated Content Injection
Medium
CVE-2023-22700
PixelYourSite <= 9.3.0 - Cross-Site Request Forgery
Critical
CVE-2022-47615
LearnPress <= 4.1.7.3.2 - Unauthenticated Local File Inclusion
High
CVE-2022-47593
RapidLoad Power-Up for Autoptimize <= 1.6.35 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2022-4445
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection
Medium
CVE-2022-47612
Participants Database <= 2.4.5 - Cross Site Request Forgery
Medium
CVE-2023-23675
WP Smart Preloader <= 1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23870
Responsive Vertical Icon Menu <= 1.5.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-23790
Pods <= 2.9.10.2 - Cross-Site Request Forgery
Medium
CVE-2022-47596
Media Library Categories <= 1.9.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23974
Quick Event Manager <= 9.7.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.