Medium
CVE-2023-48087
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,540
High
CVE-2023-47637
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
Medium
CVE-2023-47636
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document
Unrated
drupal-contrib-2023-052
drupal/mollie - SA-CONTRIB-2023-052
High
CVE-2023-34062
In Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack
Medium
CVE-2023-47809
Accordion <= 2.6 - Authenticated (Editor+) Stored Cross-Site Scripting via accordion settings
Medium
CVE-2023-4690
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
Critical
CVE-2023-38399
Phlox Portfolio <= 2.3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2023-47817
Daily Prayer Time <= 2023.10.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47815
BP Profile Shortcodes Extra <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-39163
Phlox Shop <= 2.0.0 - Unauthenticated Local File Inclusion
Low
CVE-2023-47820
WP Like Button <= 1.7.0 - Missing Authorization via crublabFBLBAjax
Medium
CVE-2023-5381
Elementor Addon Elements <= 1.12.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47793
Acme Fix Images <= 1.0.0 - Missing Authorization via acme_fix_images_ajax_callback
Medium
CVE-2023-47811
Anywhere Flash Embed <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
91f86c22-94db-4c43-985a-2f3dd96ece21
Welcart e-Commerce <= 2.9.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2023-47812
Bamboo Columns <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47814
BMI Calculator Plugin <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4723
Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-47822
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 4.10 - Missing Authorization to Template Import
Medium
CVE-2023-47808
Add Widgets to Page <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47810
Ajax Domain Checker <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-47777
WooCommerce <= 8.1.1 & WooCommerce Blocks <= 11.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image alt Attribute
Medium
CVE-2023-4689
Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.