Medium
7f73d0a6-2eae-4d85-96ce-db5902bd6e3a
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-3179
POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Account Compromise
Medium
CVE-2023-3411
Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2023-2636
AN_GradeBook <= 5.0.1 - Authenticated (Subscriber+) SQL Injection via 'id'
Medium
3fa62b8f-1c2f-4bc9-9f2a-8b9765c2d30d
Login/Signup Popup <= 2.3 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2023-3245
Floating Chat Widget - Chaty <= 3.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
ghsa-hj8m-9fhf-v7jp
fief-server Server-Side Template Injection vulnerability
High
CVE-2023-33141
YARP Denial of Service Vulnerability
High
CVE-2023-3302
Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability
Medium
CVE-2023-3304
Admidio Improper Access Control vulnerability
Low
CVE-2023-3303
Admidio Improper Access Control vulnerability
High
CVE-2023-30260
RaspAP raspap-webgui Command Injection vulnerability
High
CVE-2023-31469
Apache StreamPipes Improper Privilege Management vulnerability
Medium
de00d13b-fab9-4284-9594-abd000fbb7ef
WP Mail Logging <= 1.11.2 - Missing Authorization to Notice Dismissal
High
CVE-2023-36385
PostX – Gutenberg Blocks for Post Grid <= 2.9.9 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-36502
Balkon <= 1.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-3182
Restrict Content <= 3.2.2 - Reflected Cross-Site Scripting
High
CVE-2023-36508
Contact Form to DB by BestWebSoft <= 1.7.1 - Authenticated (Administrator+) SQL Injection via 's'
Medium
CVE-2023-36503
MaxButtons <= 9.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-3132
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
Medium
CVE-2023-3387
Lana Text to Image <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2579
InventoryPress <= 1.7 - Authenticated(Author+) Stored Cross-Site Scripting
Medium
CVE-2023-36504
BBS e-Popup <= 2.4.5 - Missing Authorization
Medium
79bb311d-d10d-4e4e-b690-84c0051b9911
Restrict Content <= 3.2.2 - Missing Authorization to Notice Dismissal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.