Medium
CVE-2023-41037
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-40787
SpringBlade vulnerable to SQL injection
High
CVE-2023-40828
pf4j vulnerable to remote code execution via expandIfZip method in the extract function
High
CVE-2023-40827
pf4j vulnerable to remote code execution via loadpluginPath parameter
High
CVE-2023-40826
pf4j vulnerable to remote code execution via the zippluginPath parameter
High
CVE-2023-41005
Command injection in pagekit
Medium
CVE-2023-4600
AffiliateWP <= 2.14.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
Medium
CVE-2023-4599
Email Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4390
Popup Box <= 3.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41236
Happy Elementor Addons Pro <= 2.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-4148
Ditty <= 3.1.24 - Reflected Cross-Site Scripting
Medium
CVE-2023-41242
Snap Pixel <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40333
Bridge Core <= 3.0.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-41235
Everest News Pro <= 1.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-41244
Localize Remote Images <= 1.0.9 - Cross-Site Request Forgery via admin menu
Critical
CVE-2023-4596
Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-41241
SureCart <= 2.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-41238
Social Media & Share Icons <= 2.8.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-41237
Arya Multipurpose Pro <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-49832
Site Reviews <= 6.10.2 - Missing Authorization
Medium
CVE-2023-41240
Pricing Deals for WooCommerce <= 2.0.3.2 - Missing Authorization via vtprd_ajax_clone_rule
Medium
CVE-2023-41239
PowerPress <= 11.0.6 - Authenticated (Contributor+) Server-Side Request Forgery via wp_ajax_powerpress_media_info
Critical
CVE-2023-39643
Improper neutralization of SQL parameter in Bl Modules - XML Feeds PRO module for PrestaShop
Critical
CVE-2023-39642
Improper neutralization of SQL parameter in Carts Guru - Marketing automation multicanal module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.