Medium
CVE-2023-52227
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2023-52228
Beds24 Online Booking <= 2.0.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-52224
Revolut Gateway for WooCommerce <= 4.9.7 - Missing Authorization
Medium
CVE-2023-6842
Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6742
Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images
Medium
3e4aaf2e-a0c6-47d2-9eb8-d65952a74424
OneClick Chat to Order <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-52221
Barcode Scanner with Inventory & Order Manager <= 1.5.1 - Unauthenticated Arbitrary File Upload via uploadFile
Medium
32c2a25d-e660-4700-8df3-b043cf6aa78a
LiveChat Elementor <= 1.0.13 - Cross-Site Request Forgery
Medium
CVE-2023-6788
Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery
Medium
1b9ed184-814d-46cb-979c-908bc9359fae
Swift SMTP <= 5.0.6 - Cross-Site Request Forgery
High
CVE-2024-30501
Download Monitor <= 4.9.4 - Authenticated (Admin+) SQL Injection
High
CVE-2023-51441
Apache Axis Improper Input Validation vulnerability
Medium
CVE-2024-21641
Flarum's logout Route allows open redirects
High
CVE-2023-52323
PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption
Medium
CVE-2024-22075
Firefly III allows webhooks HTML Injection.
Medium
CVE-2023-6504
Profile Builder <= 3.10.7 - Insecure Direct Object Reference to Sensitive Information Exposure via user_meta Shortcode
Medium
CVE-2023-52234
Booster Elite for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Medium
CVE-2023-6938
Oxygen Builder <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Medium
CVE-2023-52222
WooCommerce <= 8.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-52232
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Arbitrary Page/Post Deletion
Medium
CVE-2023-52230
Booster Plus for WooCommerce < 7.1.3 - Missing Authorization to Arbitrary Options Disclosure
High
CVE-2023-6751
Hostinger <= 1.9.7 - Missing Authorization to Maintenance Mode Activation
Medium
CVE-2024-21744
Mapster WP Maps <= 1.2.38 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-52225
Taggbox <= 3.1 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.