Critical
CVE-2023-27848
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
Exploited in attacks
CVE-2023-27524
Apache superset missing check for default SECRET_KEY
High
CVE-2023-2251
Uncaught Exception in yaml
High
CVE-2023-30533
Prototype Pollution in sheetJS
Medium
CVE-2023-31045
Cross-site Scripting in Backdrop CMS
Critical
CVE-2023-28131
Expo SDK has an OAuth vulnerability
Critical
CVE-2023-0600
WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection
Medium
CVE-2023-0644
Push Notifications for WordPress by PushAssist <= 3.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-31079
Tippy <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tippy shortcode
Medium
CVE-2023-31072
Advanced Category Template <= 0.1 - Stored Cross-Site Scripting via Cross-Site Request Forgery in _form.php
Medium
CVE-2023-31076
Zip Recipes <= 8.0.6 - Reflected Cross-Site Scripting via 's' parameter
Medium
CVE-2023-27416
Decon WP SMS <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-1835
Ninja Forms Contact Form <= 3.6.21 - Reflected Cross-Site Scripting via 'title'
Medium
CVE-2023-31073
Display custom fields in the frontend – Post and User Profile Fields <= 1.2.0 - Missing Authorization via vg_display_data shortcode
Medium
CVE-2023-31094
Stock Sync for WooCommerce <= 2.4.0 - Reflected Cross-Site Scripting via page parameter
Medium
CVE-2023-0329
Elementor <= 3.12.1 - Authenticated(Administrator+) SQL Injection via 'replace_urls'
Medium
CVE-2023-28783
Woocommerce Tip/Donation <= 1.2 - Authenticated (Shop manager+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-31089
Video XML Sitemap Generator <= 1.0.0 - Cross-Site Request Forgery via video_sitemap_generate
Medium
CVE-2023-1207
HTTP Headers <= 1.18.8 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-31074
Extensions for Leaflet Map <= 3.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-31086
Simple Giveaways <= 2.46 - Cross-Site Request Forgery
Medium
CVE-2023-23699
Progress Bar <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppb shortcode
Medium
CVE-2023-23703
Arconix Shortcodes <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-27422
NS Coupon to Become Customer <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.