Medium
5344499d-c183-4164-a52c-0dca7873f63d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2023-6741
WP Customer Area <= 8.2.1 - Insecure Direct Object Reference to Address Modification
Medium
CVE-2023-7084
Voting Record <= 2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-0237
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.8 (Pro) & <= 2.2.7 (Free) - Missing Authorization via eventon_save_virtual_event_settings
High
CVE-2024-22135
Order Export & Order Import for WooCommerce <= 2.4.3 - Authenticated (Shop Manager+) Arbitrary File Upload via upload_import_file
Medium
CVE-2024-21319
Microsoft ASP.NET Core project templates vulnerable to denial of service
Medium
CVE-2024-21668
react-native-mmkv Insertion of Sensitive Information into Log File vulnerability
High
CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass
High
CVE-2024-21643
Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability
Medium
CVE-2023-6147
Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability
Medium
CVE-2023-6148
Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability
Medium
CVE-2023-6149
Qualys Jenkins Plugin for WAS XML External Entity vulnerability
Medium
CVE-2023-50974
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system
Medium
CVE-2023-46906
juzawebCMS Incorrect Access Control vulnerability
Medium
CVE-2023-7071
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-7070
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
f2b5213d-fdc5-4c98-9a05-15d83bd7308f
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery
Medium
CVE-2024-0187
Community by PeepSo <= 6.3.1.1 - Reflected Cross-Site Scripting
Medium
d89918e1-b525-4d32-9b11-5e014eb02c16
Auto Affiliate Links <= 6.4.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-6242
EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Cross-Site Request Forgery via evo_eventpost_update_meta
Critical
CVE-2023-51409
AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload
Medium
CVE-2023-6244
EventON - WordPress Virtual Event Calendar Plugin <= 4.5.4 (Pro) & <= 2.2.8 (Free) - Cross-Site Request Forgery via save_virtual_event_settings
Medium
CVE-2023-7125
Community by PeepSo <= 6.3.1.1 - Cross-Site Request Forgery to User Post Creation
Medium
66377ee2-cc87-4cfe-a4e4-cef4459bf2ec
Seraphinite Alternative Slugs Manager <= 1.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.