Medium
CVE-2022-43450
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
d22fb2e8-bb61-49bc-9fab-8f7c58339a69
Custom 404 Pro <= 3.7.2 - Unauthenticated SQL Injection
Medium
CVE-2023-2113
Autoptimize <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting via Critical CSS Rules
Medium
CVE-2023-2289
wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
High
CVE-2023-0579
YARPP - Yet Another Related Posts Plugin <= 5.30.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-27421
Everest News <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-2254
Ko-fi Button <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0274
URL Params <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0551
REST API TO MiniProgram <= 4.7.7 - Authenticated (Subscriber+) Media Attachment Deletion
Medium
CVE-2023-2272
Tiempo.com <= 0.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-28994
Flatsome <= 3.16.8 - Reflected Cross-Site Scripting in UX Builder
Medium
CVE-2023-0993
Shield Security <= 17.0.17 - Missing Authorization
Medium
CVE-2023-0058
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-2271
Tiempo.com <= 0.1.2 - Cross-Site Request Forgery to Shortcode Deletion
Medium
CVE-2023-27420
Arya Multipurpose <= 1.0.5 - Reflected Cross-Site Scripting
High
33b92a86-bb3e-4307-b2cb-7dfde56505cc
Thumbnail Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting
Medium
CVE-2023-27419
Viable blog <= 1.1.4 - Cross-Site Scripting
High
CVE-2023-0992
Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2023-27843
Improper neutralization of a SQL parameter in askforaquote module for PrestaShop
High
CVE-2023-29530
HTTP Multiline Header Termination
High
CVE-2023-30626
Directory traversal + file write causing arbitrary code execution
High
CVE-2023-30628
Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior,
High
CVE-2023-30629
Incorrect success value returned in vyper
Critical
CVE-2023-29566
Remote code execution in dawnsparks-node-tesseract
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.