Medium
CVE-2023-46608
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-46610
Quill Forms <= 3.3.0 - Missing Authorization
High
CVE-2023-5311
WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification
Medium
CVE-2023-49836
Cookie Bar <= 2.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46614
WP Helper Premium <= 4.5.1 - Cross-Site Request Forgery via whp_fields
Medium
CVE-2023-46616
Draw Attention <= 2.0.15 - Improper Access Control via register_cpt
Medium
CVE-2023-46605
Convertful – Your Ultimate On-Site Conversion Tool <= 2.5 - Missing Authorization via add_woo_coupon
Medium
CVE-2023-46609
FeedFocal <= 1.2.2 - Missing Authorization via feedfocal_api_setup REST function
Medium
CVE-2023-46612
Mediabay <= 1.6 - Missing Authorization via AJAC actions
Medium
CVE-2023-5051
CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-46611
YOP Poll <= 6.5.28 - Reusable Captcha via validateImage
Medium
CVE-2023-46606
AtomChat <= 1.1.4 - Missing Authorization via credits REST API Endpoint
High
CVE-2023-46615
KD Coming Soon <= 1.7 - Unauthenticated PHP Object Injection via cetitle
Medium
CVE-2023-5823
TK Google Fonts GDPR Compliant <= 2.2.11 - Missing Authorization to Font Addition
Medium
CVE-2023-5706
VK Blocks <= 1.63.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block
Critical
CVE-2023-46358
Improper neutralization of SQL parameter in Snegurka - Referral and Affiliation Program module for PrestaShop
Critical
CVE-2023-46347
Improper neutralization of SQL parameter in NDK Design - Step by Step products Pack module for PrestaShop
High
CVE-2023-46346
Improper Limitation of a Pathname to a Restricted Directory in MyPrestaModules - Product Catalog (CSV, Excel, XML) Export PRO module for PrestaShop
Medium
CVE-2023-46288
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.4.0 to 2.7.0.
Medium
CVE-2023-46331
WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault.
Medium
CVE-2023-46332
WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.
Medium
CVE-2023-5744
Very Simple Google Maps <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-46782
MomentoPress for Momento360 <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5740
Live Chat with Facebook Messenger <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.