High
CVE-2023-48758
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-49163
teachPress <= 9.0.5 - Cross-Site Request Forgery via delete_database()
Medium
CVE-2023-48278
WP Forms Puzzle Captcha <= 4.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2023-48756
JetBlocks For Elementor <= 1.3.8 - Reflected Cross Site Scripting
Medium
CVE-2023-48779
360 Javascript Viewer <= 1.7.11 - Missing Authorization
Medium
CVE-2023-48769
Chat Bubble <= 2.3 - Cross-Site Request Forgery via cbb_submit_settings_data
Medium
CVE-2023-48762
Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery
Medium
18cbf346-91a3-4856-930e-7753eb1470d9
Chart Builder <= 1.9.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
16a3469d-6264-4ed7-b6ae-fdd7a80c8ca5
Chronopost & Mondial relay pour WooCommerce - WCMultiShipping <= 2.3.7 - Incorrect Authorization
Medium
CVE-2023-39921
Molongui <= 4.6.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-48776
Download canvasio3D Light <= 2.5.0 - Missing Authorization
Medium
CVE-2023-46086
affiliate-toolkit – WordPress Affiliate Plugin <= 3.4.3 - Reflected Cross-Site Scripting via keyword
Medium
CVE-2023-45609
Powr Pack <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-48764
WordPress Brute Force Protection – Stop Brute Force Attacks <= 2.2.5 - Authenticated (Administrator+) SQL Injection via orderby
Medium
CVE-2023-48771
File Gallery <= 1.8.5.4 - Reflected Cross-Site Scripting via post_id
Critical
CVE-2023-46353
Improper neutralization of SQL parameter in My Presta.eu - Product Tag Icons Pro for PrestaShop
High
CVE-2023-46354
Exposure of Private Personal Information to an Unauthorized Actor in MyPrestaModules - Orders (CSV, Excel) Export PRO module for PrestaShop
Low
CVE-2023-48711
google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability
Medium
CVE-2023-32065
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
Medium
CVE-2023-32064
OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility
Medium
CVE-2023-32063
OroCRMCallBundle has incorrect call view page visibility
Medium
CVE-2023-32062
OroCalendarBundle has incorrect system calendar events visibility
High
CVE-2022-41951
OroPlatform vulnerable to path traversal during temporary file manipulations
High
CVE-2023-49075
Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.