Medium
CVE-2023-6447
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2023-7082
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2023-52182
ARI Stream Quiz <= 1.3.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2023-52185
Everest Backup <= 2.1.9 - Sensitive Information Exposure via Log File
High
CVE-2023-52180
Recipe Maker For Your Food Blog from Zip Recipes <= 8.1.0 - Authenticated(Contributor+) SQL Injection
Low
CVE-2023-52084
Winter CMS Stored XSS through Backend ColorPicker FormWidget
Low
CVE-2023-52083
Winter CMS Stored XSS through privileged upload of Media Manager file followed by renaming
High
CVE-2023-5236
Infinispan circular object references causes out of memory errors
High
CVE-2023-52079
msgpackr's conversion of property names to strings can trigger infinite recursion
Medium
CVE-2023-5384
Infinispan caches credentials in clear text
Medium
CVE-2023-6681
A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. Th
High
CVE-2023-52133
Most And Least Read Posts Widget <=2.5.16 - Authenticated(Contributor+) SQL Injection via Widget settings
Medium
CVE-2023-52123
Strong Testimonials <= 3.1.10 - Cross-Site Request Forgery
Medium
CVE-2023-52121
NitroPack <= 1.10.2 - Cross-Site Request Forgery
Medium
CVE-2023-6626
Product Enquiry for WooCommerce <= 3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-52118
WP User Profile Avatar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-52142
Events Shortcodes & Templates For The Events Calendar <= 2.3.1 - Authenticated (Contributor+) SQL Injection via shortcode
Medium
CVE-2023-52148
Affiliates Manager <= 2.9.30 - Sensitive Information Exposure via Log File
Medium
CVE-2023-52120
NEX-Forms – Ultimate Form Builder <= 8.5.2 - Cross-Site Request Forgery
Medium
CVE-2023-52135
WS Form LITE <= 1.9.170 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-52134
GEO my WordPress <= 4.0.2 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-49777
YITH WooCommerce Product Add-Ons <= 4.3.0 - Authenticated(Shop Manager+) PHP Object Injection
Low
CVE-2023-52144
Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2023-52150
Dynamic Content for Elementor < 2.12.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.