High
CVE-2022-46751
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-40674
Simple URLs <= 118 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-4278
MasterStudy LMS <= 3.0.17 - Privilege Escalation
Medium
CVE-2023-4631
DoLogin Security <= 3.6 - IP Address Spoofing
Medium
CVE-2023-4307
Lock User Account <= 1.0.3 - Cross-Site Request Forgery to Account Lock/Unlock
Medium
CVE-2023-4318
Herd Effects <= 5.2.3 - Cross-Site Request Forgery to Effect Deletion
Medium
CVE-2023-40673
Cartpauj Register Captcha <= 1.0.02 - CAPTCHA Bypass
Medium
CVE-2023-41849
Posts Like Dislike <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset
High
CVE-2023-4294
URL Shortify <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via Referrer Header
Medium
CVE-2023-40665
Save as Image plugin by Pdfcrowd <= 2.16.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-4060
WP Adminify <= 3.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-4022
Herd Effects <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40672
Sticky Social Media Icons <= 2.0 - Missing Authorization via ajax_request_handle
Medium
CVE-2023-40667
Simple URLs <= 117 - Reflected Cross-Site Scripting via 'post_id'
Medium
CVE-2023-40668
Save as PDF plugin by Pdfcrowd <= 2.16.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2023-4270
Min Max Control <= 4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-40604
Cookies by JM <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40671
DX-auto-save-images <= 1.4.0 - Cross-Site Request Forgery
Medium
CVE-2023-48750
Void Elementor Post Grid Addon for Elementor Page builder <= 2.1.10 - Missing Authorization to Review Notice Dismissal
Medium
CVE-2023-2705
gAppointments - Appointment booking addon for Gravity Forms <= 1.9.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-40678
Simple URLs <= 117 - Missing Authorization via AJAX actions
Medium
CVE-2023-4451
Cockpit Cross-site Scripting vulnerability
High
CVE-2023-4433
Cockpit Cross-site Scripting vulnerability
High
CVE-2023-4432
Cockpit Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.