Medium
CVE-2021-27524
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2021-26505
MrSwitch hello.js vulnerable to prototype pollution
Medium
CVE-2020-25915
ThinkCMF Cross-site Scripting Vulnerability
Medium
CVE-2020-20523
Gila CMS Cross-site Scripting Vulnerability
High
CVE-2023-39553
apache-airflow-providers-apache-drill Improper Input Validation vulnerability
Critical
CVE-2023-40267
GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments
Medium
CVE-2023-27506
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Low
CVE-2023-4304
Froxlor vulnerable to business logic errors
Medium
CVE-2023-40210
SB Child List <= 4.5 - Cross-Site Request Forgery via 'sb_cl_update_settings'
Medium
CVE-2023-35040
SendPress Newsletters <= 1.23.11.6 - Missing Authorization
Medium
CVE-2023-3764
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
Medium
CVE-2023-30485
Avartan Slider Lite <= 1.5.3 - Reflected Cross-Site Scripting via 'asview-nouce'
Medium
CVE-2023-40197
flowpaper <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-40202
WP HTML Mail <= 3.4.0 - Cross-Site Request Forgery via 'send_test'
Medium
CVE-2023-40205
PixTypes <= 1.4.15 - Reflected Cross-Site Scripting
Medium
CVE-2022-47168
Printful Integration for WooCommerce <= 2.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-32296
Kangu para WooCommerce <= 2.2.10 - Reflected Cross-Site Scripting
Medium
CVE-2023-39994
ARMember Premium <= 5.9.2 - Missing Authorization
Medium
CVE-2023-40201
Futurio Extra <= 1.8.2 - Cross-Site Request Forgery via 'futurio_extra_reset_mod'
High
CVE-2023-40207
Donations Made Easy – Smart Donations <= 4.0.12 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-40212
WooCommerce Product Attachment <= 2.1.8 - Cross-Site Request Forgery
High
CVE-2023-40211
Post Grid <= 2.2.50 - Missing Authorization to Sensitive Information Exposure via REST API
Medium
CVE-2023-40209
Highcompress Image Compressor <= 5.0.0 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-40199
WP Like Button <= 1.6.11 - Cross-Site Request Forgery via 'saveData'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.