High
CVE-2023-3673
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-3672
webmention.js Cross-site Scripting vulnerability
High
CVE-2023-38286
Spring-boot-admin sandbox bypass via crafted HTML
Critical
CVE-2023-3668
Froxlor vulnerable to Improper Encoding or Escaping of Output
Medium
CVE-2023-3996
ARMember Lite - Membership Plugin <= 4.0.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b139260b-7741-4e35-b23f-896f23719739
Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in template_importer
Medium
CVE-2023-36676
Spectra <= 2.6.6 - Missing Authorization
High
8483196e-f476-41e5-a988-bcd8a9952a64
User Activity Log <= 1.6.2 - Unauthenticated SQL Injection via username
High
CVE-2023-36679
Spectra <= 2.6.6 - Authenticated (Contributor+) Server-Side Request Forgery in import_wpforms
High
CVE-2023-3459
Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Change
Medium
CVE-2023-2830
WP Testimonials <= 1.4.2 - Cross-Site Request Forgery to Widget Deletion
Medium
CVE-2023-37785
ImpressCMS Cross-site Scripting vulnerability
High
CVE-2023-37267
Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
Critical
CVE-2023-37466
vm2 Sandbox Escape vulnerability
Critical
CVE-2023-37903
vm2 Sandbox Escape vulnerability
Medium
CVE-2023-2082
Buy Me a Coffee – Button and Widget Plugin <= 3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-37980
Custom Field For WP Job Manager <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-37982
Integration for Contact Form 7 and Salesforce <= 1.3.3 - Open Redirect
Medium
CVE-2023-36507
BookingPress <= 1.0.64 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-37978
HTTP Headers <= 1.18.11 - Server-Side Request Forgery
Medium
CVE-2023-37977
WPFunnels <= 2.7.16 - Reflected Cross-Site Scripting
Medium
CVE-2023-25984
Dovetail <= 1.2.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-33777
Exposure of Private Personal Information to an Unauthorized Actor in Common Services - Amazon module for PrestaShop
Medium
CVE-2023-3635
Okio Signed to Unsigned Conversion Error vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.