Medium
CVE-2023-29093
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
71548a7f-43a5-4f71-8add-45f675e8aa66
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23812
Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
0b3fa78c-d97f-43bf-b3e9-47d6aa41b458
Advanced Local Pickup for WooCommerce <= 1.5.2 - Cross-Site Request Forgery
Critical
CVE-2023-28843
Improper neutralization of SQL parameter in PayPal module for PrestaShop 1.6 and 1.5
Critical
CVE-2023-28462
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
High
CVE-2023-28427
Prototype pollution in matrix-js-sdk (part 2)
Medium
CVE-2022-23522
Arbitrary file write in mindsdb when Extracting Tarballs retrieved from a remote location
Critical
CVE-2023-1712
Use of hard-coded, security-relevant constants in deepset-ai/haystack
High
CVE-2023-28935
Apache UIMA DUCC allows remote code execution
Medium
CVE-2023-26117
angular vulnerable to regular expression denial of service via the $resource service
Medium
CVE-2023-26116
angular vulnerable to regular expression denial of service via the angular.copy() utility
Medium
CVE-2023-26118
angular vulnerable to regular expression denial of service via the <input type="url"> element
Medium
CVE-2023-23792
Swatchly – WooCommerce Variation Swatches for Products <= 1.2.0 - Cross-Site Request Forgery via plugin_activation
Medium
efc53d78-a664-48d0-a752-00c56b3f792f
No CAPTCHA reCAPTCHA for WooCommerce <= 1.2.6 - Missing Authorization to Notification Dismissal
Medium
CVE-2022-46844
PixFields <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-23791
HT Menu <= 1.2.1 - Cross-Site Request Forgery via plugin_activation
Medium
CVE-2023-23803
JustTables – WooCommerce Product Table <= 1.4.9 - Cross-Site Request Forgery via plugin_activation()
Medium
CVE-2023-23789
Premmerce Redirect Manager <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
af075ffe-553a-4351-a696-5c678788f3b9
Slimstat Analytics <= 4.9.3.3 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-23731
WishSuite <= 1.3.3 - Cross-Site Request Forgery via plugin_activation()
Medium
9bcc1965-c409-40ba-a942-175646ad8fda
No CAPTCHA reCAPTCHA for WooCommerce <= 1.2.6 - Authenticated(Admin+) Stored Cross-Site Scripting via Plugin Settings
Medium
CVE-2023-23786
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.3 - Authenticated (Editor+) Stored Cross-Site Scripting
High
8566a5ad-df8a-4843-82c9-05da9d44582d
Easy Quiz Maker <= 1.5 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.