Medium
CVE-2023-32130
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-32129
Editorialmag <= 1.2.0 - Missing Authorization to Authenticated Plugin Activation
Medium
CVE-2023-1843
Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization
Unrated
775
Creative Gallery - SQL Injection
High
CVE-2023-30281
Exposure of Private Personal Information to an Unauthorized Actor in SC Quick Accounting module for PrestaShop
High
CVE-2023-31133
Ghost vulnerable to information disclosure of private API fields
Medium
CVE-2023-31125
engine.io Uncaught Exception vulnerability
Critical
CVE-2023-25826
Command injection in OpenTSDB
High
CVE-2023-25827
Cross Site Scripting in OpenTSDB
Unrated
drupal-contrib-2023-014
drupal/s3fs - SA-CONTRIB-2023-014
High
CVE-2023-30750
CM Pop-Up banners <= 1.5.10 - Authenticated (Subscriber+) SQL Injection via getStatistics
Medium
CVE-2023-32109
Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting
High
dd3fc3a4-ba32-4c05-bc93-ed7b86c426fa
Contact Form 7 extension for Google Map fields <= 1.8.3 - Stored Cross-Site Scripting
Medium
CVE-2023-32107
Photo Gallery by Ays <= 5.1.3 - Reflected Cross-Site Scripting via ays_gpg_settings_tab
High
CVE-2023-32110
JupiterX Theme <= 3.0.0 - Authenticated Local File Inclusion via print_pane
Medium
CVE-2023-32103
TP Education <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcodes
Medium
CVE-2023-32108
Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-32101
Library Viewer <= 2.0.6 - Open Redirect via 'redirect_to'
Medium
CVE-2023-31235
Participants Database <= 2.4.9 - Cross-Site Request Forgery via _process_general
Medium
a52015fe-c4df-46a6-8f23-b33730797f4c
Participants Database <= 2.4.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
a39ca182-981b-4636-acd5-4c8a269858dd
WOLF <= 1.0.6 - Cross-Site Request Forgery via wpbe_update_page_field
Medium
CVE-2023-30499
FV Flowplayer Video Player <= 7.5.32.7212 - Reflected Cross-Site Scripting via id
Medium
CVE-2023-32102
Library Viewer <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4676
OSM - OpenStreetMap <= 6.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via 'osm_map' Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.