High
CVE-2023-30495
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-28693
Advanced Youtube Channel Pagination <= 1.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-31093
Chronosly Events Calendar <= 2.6.2 - Cross-Site Request Forgery via plugin_settings_page
Medium
CVE-2023-27613
Forms Ada <= 1.0 - Reflected Cross-Site Scripting via 'p' parameter
Medium
CVE-2023-23831
Rating Widget <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcodes
Medium
CVE-2023-31091
Dynamically Register Sidebars <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
High
CVE-2023-30872
BSK Forms Blacklist <= 3.6.2 - Authenticated (Administrator+) SQL Injection via 'order' and 'orderby'
Medium
CVE-2023-27623
WP Page Numbers <= 0.5 - Cross-Site Request Forgery via wp_page_numbers_settings
High
CVE-2023-27424
Inactive User Deleter <= 1.59 - Cross-Site Request Forgery via Multiple Functions
Medium
CVE-2023-30877
XML for Google Merchant Center <= 3.0.1 - Reflected Cross-Site Scripting via page parameter
Medium
CVE-2023-27427
CRM Memberships <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-31078
WP BrowserUpdate <= 4.4.1 - Cross-Site Request Forgery via wpbu_administration
Medium
CVE-2023-26530
Updraft <= 0.6.1 - Reflected Cross-Site Scripting via 'backup_timestamp'
Medium
CVE-2023-2239
Information exposure in microweber
Medium
CVE-2023-1875
Cross-site Scripting in thorsten/phpmyfaq
High
CVE-2023-2240
Improper Privilege Management in microweber
High
CVE-2023-29019
Session fixation in fastify-passport
Medium
CVE-2023-29020
CSRF token fixation in fastify-passport
Critical
CVE-2023-29924
PowerJob vulnerable to incorrect access control
High
CVE-2023-30620
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Medium
ghsa-wjfc-pgfp-pv9c
Improper Input Validation in nyholm/psr7
Medium
ghsa-9jxr-mwpp-w643
Improper header validation in httpsoft/http-message
High
CVE-2023-30798
MultipartParser denial of service with too many fields or files
High
CVE-2023-2228
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.