Medium
CVE-2021-4428
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Critical
CVE-2023-30153
Improper neutralization of a SQL parameter in the Payplug (payplug) module for PrestaShop
Medium
CVE-2023-34036
Spring HATEOAS vulnerable to Improper Neutralization of HTTP Headers for Scripting Syntax
Critical
CVE-2023-26512
rabbitmq-connector plugin module in Apache EventMesh platforms allows attackers to send controlled message
Medium
CVE-2023-3700
Easy!Appointments Improper Access Control vulnerability
Critical
CVE-2023-3696
Mongoose Prototype Pollution vulnerability
Medium
CVE-2022-46845
Slider a SlidersPack <= 2.0.2 - Missing Authorization via wp_spaios_save_attachment_data
Medium
CVE-2023-30482
WPBulky <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-3365
MultiParcels Shipping For WooCommerce <= 1.14.13 - Missing Authorization via get_history
Medium
CVE-2023-3403
ProfileGrid <= 5.5.1 - Missing Authorization to User Import
Medium
CVE-2023-37988
Contact Form Generator <= 2.5.5 - Reflected Cross-Site Scripting
High
CVE-2023-3714
ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation
High
CVE-2023-2843
MultiParcels Shipping For WooCommerce <= 1.14.12 - Authenticated(Subscriber+) SQL Injection via id
Medium
CVE-2023-3650
Bubble Menu <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-3647
IURNY by INDIGITALL – WhatsApp Chat, Web Push Notifications (FREE) <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-32600
Rank Math SEO <= 1.0.119 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-32741
Contact Form to Any API <= 1.1.2 - Authenticated (Administrator+) SQL Injection via 'form_id'
Medium
CVE-2023-37987
YourMembership Single Sign On <= 1.1.3 - Missing Authorization
Medium
CVE-2023-3709
Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure
Medium
CVE-2023-37984
Quiz And Survey Master <= 8.1.10 - Excessive Quiz Attempts
Medium
CVE-2021-24916
Qubely – Advanced Gutenberg Blocks <= 1.8.5 - Insufficient Authorization
Medium
CVE-2023-37989
Easyship WooCommerce Shipping Rates <= 0.8.9 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-3404
ProfileGrid <= 5.5.0 - Hardcoded Encryption Key
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.