Medium
CVE-2023-1021
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-1840
Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25051
Comment Reply Notification <= 1.4 - Cross-Site Request Forgery
Critical
CVE-2023-26860
Improper neutralization of SQL parameter in lgbudget module for PrestaShop
Medium
CVE-2023-28851
Silverstripe Form Capture vulnerable to stored cross-site-scripting
Medium
CVE-2023-28850
Pimcore Perspective Editor vulnerable to stored cross-site scripting (XSS) in perspective name
High
CVE-2023-28836
Wagtail vulnerable to stored Cross-site Scripting attack via ModelAdmin views
Medium
CVE-2023-28837
Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files
High
CVE-2023-26269
Apache James server's JMX management service vulnerable to privilege escalation by local user
Medium
CVE-2023-1129
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Manipulation
High
CVE-2023-1420
Ajax Search Lite <= 4.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-29094
Product page shipping calculator for WooCommerce <= 1.3.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1624
WPCode <= 2.0.8 - Cross-Site Request Forgery
Medium
df413b9d-5c22-4276-a11b-4f193c48740d
HT Builder <= 1.2.9 - Cross-Site Request Forgery via plugin_activation
Critical
CVE-2023-1020
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2023-1435
Ajax Search Pro <= 4.26.1 - Reflected Cross-Site Scripting
High
CVE-2023-1196
Advanced Custom Fields <= 6.0.7 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2023-29172
PropertyHive <= 1.5.46 - Reflected Cross-Site Scripting via 'merge_ids'
Medium
CVE-2023-28993
Albo Pretorio Online <= 4.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-29170
Product Enquiry for WooCommerce <= 2.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0388
Random Text <= 0.3.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2023-0899
Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated Stored Cross-Site Scripting
Medium
1ddcd2eb-fd7a-48b7-b9ea-3632d49e9734
MasterStudy LMS WordPress Plugin <= 2.9.34 - Missing Authorization via wp_ajax_stm_wpcfto_get_settings
Medium
CVE-2023-1090
SMTP Mailing Queue <= 1.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.