Medium
ghsa-6g3j-p5g6-992f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
CVE-2023-49371
RuoYi vulnerable to SQL injection vulnerability
High
CVE-2023-49735
Apache Tiles: Unvalidated input may lead to path traversal and XXE
Medium
CVE-2023-49745
Spiffy Calendar <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-49195
Nested Pages <= 3.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
ac7c0dde-5299-4938-beed-eb2fe227a812
SpeedyCache <= 1.1.2 - Missing Authorization via speedycache_create_test_cache
Medium
CVE-2023-49741
Coming soon and Maintenance mode <= 3.7.3 - IP Address Spoofing via get_real_ip
Medium
95abec2d-a03a-4b07-8890-18568650c41f
Gift Up 2.21.3 - Cross-Site Request Forgery via consume_post
Critical
CVE-2023-5991
Hotel Booking Lite <= 4.8.4 - Insufficient Path Validation to Unauthenticated Arbitrary File Deletion and Download
Medium
CVE-2023-49194
Importify <= 1.0.4 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-49740
Seraphinite Accelerator <= 2.20.28 - Reflected Cross-Site Scripting via rt
Medium
CVE-2023-49196
PageLayer <= 1.7.7 - Cross-Site Request Forgery via pagelayer_load_plugin
Medium
CVE-2023-49739
PowerPack Pro for Elementor <= 2.9.23 - Reflected Cross-Site Scripting
Medium
CVE-2023-49192
Enhanced Text Widget <= 1.6.3 - Missing Authorization via etw_hide_admin_notification_callback
Medium
CVE-2023-49193
Social Pug <= 1.30.0 - Missing Authorization via multiple admin_init actions
Medium
1ce1316b-674a-4436-968f-9ffca4e8f726
Abandoned Cart Lite for WooCommerce <= 5.16.1 - Cross-Site Request Forgery
Medium
0b7d7b64-8194-4b81-83f5-1f3b23109455
Guest Author <= 2.3 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2023-4218
Eclipse IDE XXE in eclipse.platform
Medium
CVE-2023-48631
@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity
Medium
CVE-2023-6027
PHPMemcachedAdmin vulnerable to cross-site scripting (XSS) via improper encoding
Critical
CVE-2023-6026
PHPMemcachedAdmin Path Traversal vulnerability
Critical
CVE-2023-49733
Apache Cocoon Improper Restriction of XML External Entity Reference vulnerability
Critical
CVE-2022-45135
Apache Cocoon SQL Injection vulnerability
Medium
CVE-2023-49620
Apache DolphinScheduler Missing Authorization vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.