Medium
CVE-2023-50783
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2023-49920
Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website
Critical
CVE-2023-50475
bsock uses weak hashing algorithms
Medium
CVE-2023-47265
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. Thi
Medium
CVE-2023-48291
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write acce
Medium
CVE-2024-0248
EazyDocs 2.3.8 - 2.3.9 - Missing Authorization
Medium
CVE-2023-6066
Custom Widget Area <= 1.2.5 - Missing Authorization to Authenticated (Subscriber+) Menu Alteration
High
CVE-2023-50841
BookingPress <= 1.0.72 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-51501
Uncode Core <= 2.8.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-50852
BookIt <= 2.4.3 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50853
Advanced Form Integration <= 1.75.0 - Authenticated(Administrator+) SQL Injection
Critical
CVE-2023-6623
Essential Blocks <= 4.4.2 - Unauthenticated Local File Inclusion
Medium
CVE-2023-50856
Funnel Builder for WordPress by FunnelKit <= 2.14.3 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-51515
Uncode Core <= 2.8.8 - Privilege Escalation
Medium
CVE-2023-50845
GeoDirectory <= 2.3.28 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-50847
Welcart e-Commerce <= 2.9.3 - Authenticated(Editor+) SQL Injection
High
CVE-2023-6620
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-50846
RegistrationMagic Plugin <= 5.2.4.5 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-50840
Booking Manager <= 2.1.5 - Authenticated(Contributor+) SQL Injection via Shortcode
Medium
CVE-2023-50854
Squirrly SEO - Advanced Pack < 2.4.02 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50857
Automation By Autonami <= 2.6.1 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-5905
DeMomentSomTres WordPress Export Posts With Images <= 20220825 - Missing Authorization to Blog Data Export
High
CVE-2023-50842
MF Gig Calendar <=1.2.1 - Authenticated(Contributor+) SQL Injection
Medium
CVE-2023-50837
Login Lockdown – Protect Login Form <= 2.06 - Authenticated(Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.