Medium
d09a0b62-6556-4be5-a6f2-0cb0edcced3b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
a4572874-afd4-4e46-8a28-76a0a6cc8acb
Pagination by BestWebSoft < 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
a2dc1a04-5503-412b-92e7-ed86910abd92
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_delete_payment_note
Medium
5ea02dd5-d837-471c-aa6a-264ffcedd55d
GiveWP <= 2.25.2 - Cross-Site Request Forgery
Critical
CVE-2023-28121
WooCommerce Payments 4.8.0 - 5.6.1 Authentication Bypass and Privilege Escalation
Medium
3adf6b20-110f-4057-9fab-5248e9c18555
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
766
JoomGallery - SQL Injection
Critical
CVE-2023-27847
Improper neutralization of multiple SQL parameters in the xipblog module for PrestaShop
Medium
CVE-2023-0870
OpenNMS Meridian and Horizon vulnerable to Cross-Site Request Forgery
Medium
CVE-2023-28438
Pimcore vulnerable to improper quoting of filters in Custom Reports
Medium
CVE-2023-1578
Pimcore Remote Code Execution vulnerability in Search function
Medium
CVE-2023-28708
Apache Tomcat vulnerable to Unprotected Transport of Credentials
High
CVE-2023-1436
Jettison vulnerable to infinite recursion
Medium
CVE-2023-28665
Bulk Price Update for Woocommerce <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-46812
Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.0.13 - Cross-Site Request Forgery via send_email
Medium
CVE-2022-46822
WooCommerce JazzCash Gateway Plugin <= 2.0 - Unauthenticated Cross-Site Scripting
Medium
CVE-2022-46800
LiteSpeed Cache <= 5.3 - Missing Authorization to Toggle Crawler State
Medium
cf13732b-7c24-443a-bae9-d8cf70b5cb33
Stock Sync for WooCommerce <= 2.3.2 - Cross-Site Request Forgery
Medium
CVE-2023-28619
Resoto <= 1.0.8 - Missing Authorization leading to Authenticated (Subscriber+) Arbitrary Plugin Activation
Medium
CVE-2022-46793
Product Feed PRO for WooCommerce <= 12.4.0 - Cross-Site Request Forgery via update_project
Medium
CVE-2023-0367
Pricing Tables For WPBakery Page Builder (formerly Visual Composer) <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-46807
Stock Sync for WooCommerce <= 2.3.2 - Missing Authorization
Medium
CVE-2023-28696
I Recommend This <= 3.9.0 - Cross-Site Request Forgery
Medium
CVE-2023-1373
W4 Post List <= 2.4.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.