Medium
CVE-2023-0605
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2022-47138
LOGIN AND REGISTRATION ATTEMPTS LIMIT <= 2.1 - Cross-Site Request Forgery
High
CVE-2023-24420
Admin side data storage for Contact Form 7 <= 1.1.2 - Stored Cross-Site Scripting
Medium
CVE-2023-28173
Google XML Sitemap for Images <= 2.1.3 - Cross-Site Request Forgery via image_sitemap_generate
Critical
CVE-2023-25206
Multiple improper neutralization of SQL parameters in ws_productreviews module for PrestaShop
High
CVE-2023-27490
Missing proper state, nonce and PKCE checks for OAuth authentication
Medium
CVE-2023-27577
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files
Medium
CVE-2023-27580
Password Shucking Vulnerability
High
CVE-2022-43441
sqlite vulnerable to code execution due to Object coercion
High
CVE-2023-1367
Code Injection in alextselegidis/easyappointments
High
CVE-2023-28154
webpack JS package <= 5.75.0 - Sandbox Bypass
Medium
CVE-2023-27626
Stock Ticker <= 3.23.0 - Missing Authorization via AJAX actions
Medium
CVE-2023-28171
Brilliance <= 1.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-27612
Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-27625
Site Reviews <= 6.5.1 - Missing Authorization
Medium
CVE-2022-46795
Print Invoice & Delivery Notes for WooCommerce <= 4.7.2 - Cross-Site Request Forgery via ts_reset_tracking_setting
Medium
CVE-2023-25456
Klaviyo <= 3.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-1372
WH Testimonials <= 3.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-46794
WooCommerce Weight Based Shipping <= 5.4.1 - Cross-Site Request Forgery leading to Plugin Settings Changes
Medium
CVE-2023-1374
Solidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25043
Data Tables Generator by Supsystic <= 1.10.25 - Missing Authorization
Medium
CVE-2022-47180
Kopa Framework <= 1.3.5 - Cross-Site Request Forgery
High
CVE-2023-1124
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url
Medium
CVE-2023-25452
CMS Press <= 0.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.