Medium
CVE-2022-25901
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2018-25077
mel-spintax has Inefficient Regular Expression Complexity
High
CVE-2020-36651
Path Traversal in web-node-server
High
CVE-2021-32837
mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a
High
CVE-2010-10006
Observable timing discrepancy in JOpenId
High
CVE-2023-21893
Component takeover in Oracle Data Provider for .NET
High
d589bada-3568-45ed-9f7c-fb14363a617a
MainWP (Various extensions) - Missing Authorization to Arbitrary Page/Post Deletion
High
cb105ff0-5085-4813-81a6-b1f0798d576c
MainWP (Various extensions) - Cross-Site Request Forgery
Medium
CVE-2023-23663
MainWP Comments Extension <= 4.0.6 - Missing Authorization
High
CVE-2023-23645
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) PHP Code Injection
Critical
CVE-2023-23649
MainWP Links Manager Extension <= 2.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-0385
Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery
Medium
94f7f2d2-e90b-4978-bab8-eee160949567
MainWP UpdraftPlus Extension <= 4.0.6 - Missing Authorization
Medium
CVE-2022-4512
Better Font Awesome <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Critical
CVE-2023-23656
MainWP File Uploader Extension <= 4.1 - Unauthenticated Arbitrary File Upload
Medium
6c563616-e405-4b3e-a70a-543f42118a97
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary Plugin Installation
Medium
CVE-2023-0333
TemplatesNext ToolKit <= 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23650
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
306a9960-7139-4142-a249-4de2b3c4b985
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2023-23660
MainWP Maintenance Extension <= 4.1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-0360
Location Weather <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Critical
CVE-2023-23737
MainWP Broken Link Checker <= 4.0 - Unauthenticated SQL Injection
Critical
CVE-2023-22731
Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views
Medium
CVE-2023-22730
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.