Medium
2077bd81-52bd-4aa7-85f6-9abb02aec65b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-4253
ChatBot <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Medium
CVE-2023-4254
ChatBot 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in Language Settings
Medium
0e454573-4b34-40e3-b4c3-10eb71dfa03e
Paid Memberships Pro - Courses for Membership Add On <= 1.2.3 - Cross-Site Request Forgery to Course Modifications
Critical
CVE-2023-39363
Vyper has incorrectly allocated named re-entrancy locks
Critical
CVE-2023-37390
Themesflat Addons For Elementor <= 2.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2023-39918
Booking Package <= 1.6.01 - Reflected Cross-Site Scripting via 'mode'
Medium
CVE-2023-4109
Ninja Forms <= 3.6.25 - Authenticated (Administrator+) Stored HTML Injection
Medium
CVE-2023-39314
Leyka <= 3.30.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-39165
Sign-up Sheets <= 2.2.8 - Cross-Site Request Forgery
Medium
CVE-2023-4013
GDPR Cookie Compliance <= 4.12.4 - Cross-Site Request Forgery to License Modification
Medium
CVE-2023-4209
POEditor <= 0.9.7 - Cross-Site Request Forgery
Medium
CVE-2023-39923
The Post Grid <= 7.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-4150
User Activity Tracking and Log <= 4.0.8 - Cross-Site Request Forgery
Medium
CVE-2023-4023
All Users Messenger <= 1.24 - Authenticated (Subscriber+) Insecure Direct Object Reference to Message Deletion
Medium
CVE-2023-39917
Photo Gallery by Ays <= 5.2.6 - Cross-Site Request Forgery
High
CVE-2023-39527
Possible XSS injection through Validate::isCleanHTML method
Medium
CVE-2023-39526
SQL manager vulnerability (potential RCE)
High
CVE-2023-39525
[CVE-2023-39529][CVE-2023-39530] path traversal: file deletion in the backoffice
Medium
CVE-2023-39524
Full SQL injection possible in search product in backoffice
Critical
CVE-2023-39528
Reading a file through path traversal & Remote Code Execution via unsafe deserialization
Critical
CVE-2023-4195
Cockpit PHP Remote File Inclusion vulnerability
High
CVE-2023-4196
Cockpit Cross-site Scripting vulnerability
Medium
CVE-2023-4190
Admidio Insufficient Session Expiration vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.