Medium
CVE-2023-26115
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-2561
Gallery Metabox <= 1.5 - Missing Authorization via gallery_remove
Medium
CVE-2023-36505
Ninja Forms <= 3.6.24 - Authenticated (Admin+) Arbitrary File Deletion
Medium
CVE-2023-36510
ReDi Restaurant Reservation <= 23.0211 - Missing Authorization
High
CVE-2023-3167
Mail Queue <= 1.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-2517
Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup
High
CVE-2023-2188
Colibri Page Builder <= 1.0.227 - Authenticated (Administrator+) SQL Injection via post_id
Medium
CVE-2023-3369
About Me 3000 widget <= 2.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b27338c7-2fbc-4985-a25e-8e2a9fdef8c3
Customer Service Software & Support Ticket System <= 5.12.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36501
teachPress <= 9.0.2 - Reflected Cross-Site Scripting via meta_field_id and cite_id
Medium
CVE-2023-36384
Booking Calendar Contact Form <= 1.2.40 - Reflected Cross-Site Scripting
Medium
CVE-2023-2562
Gallery Metabox <= 1.5 - Missing Authorization via refresh_metabox
Medium
CVE-2023-33996
Spam protection, AntiSpam, FireWall by CleanTalk <= 6.10 - Missing Authorization
High
CVE-2023-2229
Quick Post Duplicator <= 2.0 - Authenticated (Contributor+) SQL Injection via post_id
Medium
CVE-2023-32104
MyCurator Content Curation <= 3.74 - Cross-Site Request Forgery
High
CVE-2023-30195
Exposure of Private Personal Information to an Unauthorized Actor in Linea Grafica - Detailed Order module for PrestaShop
High
ghsa-5wrg-8fxp-cx9r
passport-wsfed-saml2 Signature Bypass vulnerability
High
CVE-2023-35926
Backstage Scaffolder plugin has insecure sandbox
High
CVE-2017-16897
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token
Critical
CVE-2023-35169
php-imap vulnerable to RCE through a directory traversal vulnerability
Medium
CVE-2023-33725
Broadleaf vulnerable to Cross-site Scripting
Unrated
drupal-contrib-2023-021
drupal/civicccookiecontrol - SA-CONTRIB-2023-021
High
CVE-2023-34981
Apache Tomcat vulnerable to information leak
Critical
CVE-2023-34340
Apache Accumulo Improper Authentication vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.