Medium
CVE-2023-28417
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-28499
Slide Anything <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-28497
Slideshow Gallery LITE <= 1.7.6 - Cross-Site Request Forgery via admin_slides
Critical
CVE-2023-27569
-[CVE-2023-27570] Improper neutralization of SQL parameters in Profileo : Tracking et Conversions (eo_tags) module for PrestaShop
High
CVE-2023-25617
SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling
Medium
CVE-2023-24279
ONOS vulnerable to reflected cross-site scripting
Medium
CVE-2023-28168
WordPress Console <= 0.3.9 - Missing Authorization via reload.php
Medium
CVE-2023-23707
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG files
Medium
CVE-2023-1400
Modern Events Calendar lite < 6.10.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-47597
Popup Maker <= 1.17.1 - Sensitive Data Exposure via debug log file
Medium
CVE-2023-28421
WordPress Email Marketing Plugin – WP Email Capture <= 3.10 - Information Exposure via wp_email_capture_options_process
Medium
CVE-2022-47447
WP-Advanced-Search <= 3.3.8 - Cross-Site Request Forgery leading to Plugin Settings Updates
Medium
98e0d103-2369-4c6a-93ae-6be2a1770bae
Dynamics 365 Integration <= 1.3.12 - Cross-Site Request Forgery via wp_ajax_wpcrm_log_verbosity
Medium
CVE-2023-28423
Modern Footnotes <= 1.4.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28167
CF7 Invisible reCAPTCHA <= 1.3.3 - Cross-Site Request Forgery via vsz_cf7_invisible_recaptcha_page
Medium
7d500729-3b1a-4ece-81de-4c1f9afbf798
Redirect Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin De-Installation
Medium
CVE-2022-47139
WP Basic Elements <= 5.2.15 - Cross-Site Request Forgery via wpbe_save_settings
Medium
CVE-2023-25052
Yandex.News Feed by Teplitsa <= 1.12.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28166
Tags Cloud Manager <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-28169
Easy Event calendar <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47429
Coming Soon Landing Page and Maintenance Mode WordPress Plugin <= 2.2.0 - Missing Authorization
Medium
CVE-2023-27633
Customify <= 2.10.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-47448
xili-tidy-tags <= 1.12.03 - Cross-Site Request Forgery
Medium
CVE-2022-47135
Chronoforms <= 7.0.9 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.