Medium
CVE-2023-4067
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2023-29384
WordPress Job Board and Recruitment Plugin – JobWP <= 2.0 - Arbitrary File Upload via 'jobwp_upload_resume'
Critical
CVE-2023-3162
Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass
High
0903bd2b-240f-4791-bfa6-f727d193af4a
Booster for WooCommerce 7.0.0 - Authenticated (Shop Manager+) Missing Authorization to Arbitrary Options Update
Critical
CVE-2023-33665
Improper neutralization of a SQL parameter in aitable from ai-dev module for PrestaShop
Medium
ghsa-4q66-g4mm-8rg5
Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE
Low
CVE-2023-32302
Silverstripe Framework: Members with no password can be created and bypass custom login forms
High
CVE-2023-4007
phpMyFAQ Stored Cross-site Scripting vulnerability
High
CVE-2023-4006
phpMyFAQ Improper Neutralization of Formula Elements in a CSV File vulnerability
Medium
dcd05142-9700-46a8-9ca6-f85e81dfee0d
Short URL <= 1.6.7 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-3954
MultiParcels Shipping For WooCommerce <= 1.15.3 - Reflected Cross-Site Scripting
Critical
82420667-9ba6-46ed-9a53-d16850755bb9
TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API
Medium
CVE-2023-4035
Simple Blog Card <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
6d041edb-70f3-4894-8a78-f6881541054c
Shop as a Customer for WooCommerce <= 1.1.7 - Authenticated (Subscriber+) Privilege Escalation
Medium
5f9cf9c5-d836-4414-a53f-adee2784bd96
Media from FTP <= 11.15 - Improper Privilege Management
Medium
CVE-2023-3366
MultiParcels Shipping For WooCommerce <= 1.15.1 - Cross-Site Request Forgery
High
3c730a69-015a-4b36-aa16-eff6916a302f
Shop as a Customer for WooCommerce <= 1.2.3 - Authenticated (Shop Manager+) Privilege Escalation
Medium
CVE-2023-39919
wpShopGermany - Protected Shops <= 2.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Unrated
803
Solidres - hub plugin XSS (Cross Site Scripting)
High
CVE-2023-36542
Apache NiFi Code Injection vulnerability
High
CVE-2023-38488
Field injection in the KirbyData text storage handler
High
CVE-2023-38489
Insufficient Session Expiration after a password change
Medium
CVE-2023-38490
XML External Entity (XXE) vulnerability in the XML data handler
Medium
CVE-2023-38491
Cross-site scripting (XSS) from MIME type auto-detection of uploaded files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.