Medium
CVE-2023-44151
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-49197
DoFollow Case by Case <= 3.4.2 Cross-Site Request Forgery via getEmail and getUrl
High
CVE-2023-4274
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal
Medium
CVE-2023-4645
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
Medium
CVE-2023-5134
Easy Registration Forms <= 2.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-5120
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2023-44148
Astra Bulk Edit <= 1.2.7 - Missing Authorization
High
00687370-8374-44cc-8fd1-53b462acd061
iPanorama 360 – WordPress Virtual Tour Builder <= 1.7.3 - Authenticated (Admin+) SQL injection
Unrated
809
EasyShop - XSS (Cross Site Scripting)
Low
ghsa-hc5c-r8m5-2gfh
plone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait
Critical
CVE-2023-42810
systeminformation SSID Command Injection Vulnerability
Medium
CVE-2023-41048
plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1.3, and 6.2.1, there is a stored cross sit
Critical
ghsa-j646-gj5p-p45g
CefSharp affected by heap buffer overflow in WebP
Low
ghsa-v8gr-m533-ghj9
Vulnerable OpenSSL included in cryptography wheels
High
CVE-2023-42457
plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when the `++api++` traverser is accidentally
Medium
CVE-2023-5104
Improper Input Validation in nocodb
Medium
CVE-2018-5478
Contao Cross-site Scripting vulnerabililty
Critical
CVE-2015-5467
Yii2 allows attackers to execute any local .php file via a relative path in the view parameter
High
CVE-2015-8371
Composer allows cache poisoning from other projects built on the same host
Medium
CVE-2023-44146
Checkfront Online Booking System <= 3.6 - Cross-Site Request Forgery
Medium
CVE-2023-4774
WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4783
Magee Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4716
Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4388
EventON <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.