High
CVE-2023-1509
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-25446
HappyFiles Pro <= 1.8.1 - Missing Authorization to Arbitrary File Deletion
Medium
CVE-2023-1414
WP VR <= 8.2.9 - Missing Authorization
Medium
CVE-2023-28989
Happy Addons for Elementor <= 3.8.2 - Cross-Site Request Forgery via handle_optin_optout()
Medium
057ab824-8071-4c3c-9a57-f9a0043a9ad5
Feed Them Social <= 4.0.7 - Cross-Site Request Forgery
Medium
CVE-2023-25722
Veracode Scan Jenkins Plugin vulnerable to information disclosure
Medium
CVE-2023-25721
Veracode Scan Jenkins Plugin vulnerable to information disclosure
High
CVE-2022-36060
matrix-react-sdk Prototype pollution vulnerability
High
CVE-2022-36059
matrix-js-sdk Prototype Pollution vulnerability
Critical
CVE-2023-28326
Apache OpenMeetings missing authentication and can allow user impersonation
Critical
CVE-2023-20860
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch
Medium
f670b93e-da2e-43e7-a28a-6cacba4df3a1
Simple Author Box <= 2.50 - Cross-Site Request Forgery via save_user_profile
Medium
CVE-2023-1623
Custom Post Type UI <= 1.13.4 - Cross-Site Request Forgery to Sensitive Information Exposure
Medium
CVE-2023-24392
Full Width Banner Slider Wp <= 1.1.7 - Reflected Cross-Site Scripting via search_term
Medium
CVE-2022-41635
Advanced Shipment Tracking for WooCommerce <= 3.5.2 - Cross-Site Request Forgery via paginate_shipping_provider_list and filter_shipping_provider_list
High
CVE-2022-46850
Easy Media Replace <= 0.1.3 - Authenticated (Author+) Arbitrary File Deletion
Medium
CVE-2022-46864
Woocommerce Custom Checkout Fields Editor With Drag & Drop <= 0.1 - Reflected Cross-Site Scripting via 'tab'
Medium
CVE-2022-46858
Product Specifications for Woocommerce <= 0.6.0 - Reflected Cross-Site Scripting via Arbitrary Query String Parameter
Medium
CVE-2023-0418
Video Central for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0424
MS-Reviews <= 1.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
5c51f55f-6e8c-467c-999b-4e6a1a6f7bbc
WC Fields Factory <= 4.1.5 - Authenticated(Subscriber+) SQL Injection
High
CVE-2023-3124
Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option
Medium
CVE-2023-23993
IP Blocker Lite <= 11.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-0420
Custom Post Type and Taxonomy GUI Manager <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.