Medium
CVE-2023-6272
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-48747
Booster for WooCommerce <= 7.1.2 - Missing Authorization to Product Creation/Modification
Critical
CVE-2023-49210
openssl npm package vulnerable to command execution
Medium
CVE-2023-33202
Bouncy Castle Denial of Service (DoS)
Medium
CVE-2023-43123
Apache Storm Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files
Medium
CVE-2023-49146
Cross-site Scripting in DOMSanitizer
Medium
CVE-2023-48707
Cleartext Storage of Sensitive Information in HMAC SHA256 Authentication
Medium
CVE-2023-48708
Insertion of Sensitive Information into Log
Medium
CVE-2023-48280
Consensu.io <= 1.0.3 - Missing Authorization via update_config_db()
Critical
CVE-2023-48738
Porto Theme - Functionality <= 2.11.1 - Unauthenticated SQL Injection
Medium
CVE-2023-4960
WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-48334
League Table <= 1.13 - Cross-Site Request Forgery
Medium
CVE-2023-48282
Taxonomy filter <= 2.2.9 - Cross-Site Request Forgery via taxonomy_filter_save_main_settings()
Medium
CVE-2023-48279
Seraphinite Post .DOCX Source <= 2.16.6 - Cross-Site Request Forgery
High
CVE-2023-48741
ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-48289
Import Spreadsheets from Microsoft Excel <= 10.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-40334
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.4.2 - Missing Authorization via woof_meta_get_keys()
Medium
CVE-2023-48322
eDoc Employee Job Application <= 1.13 - Reflected Cross-Site Scripting
High
CVE-2023-48288
WordPress Job Board and Recruitment Plugin – JobWP <= 2.1 - Sensitive Information Exposure
Medium
CVE-2023-48325
Landing Page Builder <= 1.5.1.5 - Open Redirect
Medium
CVE-2023-5949
Simple Social Media Share Buttons <= 3.8.2 - Unauthenticated Password Protected Post Disclosure
Medium
CVE-2023-48318
Contact Form Email <= 1.3.41 - Captcha Bypass
Medium
CVE-2023-48283
Simple Testimonials Showcase <= 1.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-48336
Easy Social Icons <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.