High
CVE-2023-46084
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-3254
Widgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset
Medium
CVE-2023-46069
Ajax Archive Calendar <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-46067
Rocket Font <= 1.2.3 - Cross-Site Request Forgery via update_option_check_match_default
Critical
CVE-2023-5601
WooCommerce Ninja Forms Product Add-ons <= 1.7.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-32116
Custom post types <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4858
Simple Table Manager <= 1.5.6 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5613
Super Testimonials <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-30492
Minimum Purchase for WooCommerce <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-46072
Add Shortcodes Actions And Filters <= 2.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-46075
Contact Form Builder, Contact Widget <= 2.1.7 - Reflected Cross-Site Scripting
High
CVE-2023-46081
Lava Directory Manager <= 1.1.34 - Unauthenticated Stored Cross-Site Scripting via New Listing
Medium
CVE-2023-4810
Responsive Pricing Table < 5.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-5614
Theme Switcha <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5228
User Registration – Custom Registration Form, Login Form And User Profile For WordPress <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46085
Wp Ultimate Review <= 2.3.0 - Cross-Site Request Forgery via wur_settings_view
Medium
CVE-2023-46079
Ashe Extra <= 1.2.91 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-46087
Who Hit The Page – Hit Counter <= 1.4.14.3 - Cross-Site Request Forgery
Critical
CVE-2011-10004
Recip.ly <= 1.1.7 - Unauthenticated Arbitrary File Upload in uploadImage.php
Medium
CVE-2023-46077
The Awesome Feed – Custom Feed <= 2.2.5 - Reflected Cross-Site Scripting
High
CVE-2023-5590
NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.
Medium
CVE-2018-25091
urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in t
Medium
CVE-2023-5082
History Log by click5 <= 1.0.12 - Authenticated(Administrator+) Time-Based Blind SQL Injection
Medium
CVE-2023-42792
Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write acce
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.