Unrated
801
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-26859
Multiple improper neutralizations of an SQL parameters in Sendinblue module for PrestaShop
Critical
CVE-2023-34478
Path Traversal in Apache Shiro
Medium
f962a3ef-205d-42e2-acf1-45eabfdba3ee
Local Development <=2.8.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-38396
Google Map Shortcode <= 3.1.2 - Cross-Site Request Forgery to Plugin Setting Update
Medium
CVE-2023-38483
Instant CSS <= 1.1.4 - Missing Authorization via AJAX Actions
High
CVE-2023-3435
User Activity Log <= 1.6.4 - Unauthenticated SQL Injection
Medium
CVE-2023-38479
Simple Googlebot Visit <= 1.2.4 - Missing Authorization to Settings Update
Medium
CVE-2023-38398
Taboola <= 2.0.1 - Cross-Site Request Forgery to Plugin Settings Update
Critical
CVE-2023-32297
LWS Affiliation <= 2.2.6 - Unauthenticated Remote/Local File Inclusion
Medium
CVE-2023-3645
Contact Form Builder by Bit Form <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-38477
QR code MeCard/vCard generator <= 1.6.0 - Missing Authorization via wqm_make_url_permanent
Medium
CVE-2023-3721
WP-EMail <= 2.69.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-38392
Custom Field Template <= 2.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-2802
Ultimate Addons for Contact Form 7 <= 3.1.28 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-3636
WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2023-37990
Perelink Pro <= 2.1.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-38480
Booster Elementor Addons <= 1.4.9 - Missing Authorization
Medium
CVE-2023-3328
Custom Field For WP Job Manager <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-30491
CodeBard's Patron Button and Widgets for Patreon <= 2.1.8 - Reflected Cross-Site Scripting via 'site_account'
High
2e8f224c-cd22-4926-be24-9da2f22afa50
WPML String Translation <= 3.2.5 - Authenticated (Administrator+) SQL Injection via 'context'
High
CVE-2023-3211
WordPress Database Administrator <= 1.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-3601
Simple Author Box <= 2.51 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary User Sensitive Information Exposure
Medium
CVE-2023-2803
Ultimate Addons for Contact Form 7 <= 3.1.28 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.