Medium
CVE-2022-45835
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-0820
User Role by BestWebSoft <= 1.6.6 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2023-27619
Regina Lite <= 2.0.7 - Reflected Cross-Site Scripting
Medium
7945110e-2a9d-4e0e-b0e8-77c16694993b
Dynamics 365 Integration <= 1.3.12 - Cross-Site Request Forgery via wp_ajax_wpcrm_log
Medium
CVE-2023-28172
WP Google Map Plugin <= 4.4.2 - Cross-Site Request Forgery via delete()
Medium
CVE-2023-27611
Reusable Blocks Extended <= 0.9 - Cross-Site Request Forgery via reblex_reusable_screen_block_pattern_registration
Medium
CVE-2023-27620
Robo Gallery <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2023-1377
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-45812
Exxp <= 2.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-27629
Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attribute
High
CVE-2023-27634
Intrepidity <= 1.5.1 - Cross-Site Request Forgery via mytheme_add_admin
Critical
CVE-2023-29629
Blind SQL injection vulnerability in Jms Theme Layout (jmsthemelayout) PrestaShop module
Critical
CVE-2023-29631
Unrestricted upload vulnerability in Jms Slider (jmsslider) PrestaShop module
Critical
CVE-2023-29632
Blind SQL injection vulnerability in Jms Page Builder (jmspagebuilder) PrestaShop module
Critical
CVE-2023-29630
Blind SQL injection vulnerability in Jms Vertical MegaMenu (jmsvermegamenu) PrestaShop module
Critical
CVE-2023-27034
Blind SQL injection vulnerability in Jms Blog (jmsblog) PrestaShop module
Medium
CVE-2023-25170
Possible CSRF token fixation (CWE-352)
High
CVE-2022-48365
Company admin role gives excessive privileges in eZ Platform Ibexa
Low
CVE-2022-48366
Timing attack in eZ Platform Ibexa
Medium
CVE-2023-0276
Weaver Xtreme Theme Support <= 6.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-28465
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057
High
CVE-2023-27898
Cross-site Scripting vulnerability in Jenkins
Low
CVE-2023-27903
Incorrect Authorization in Jenkins Core
Low
CVE-2023-27904
Information disclosure through error stack traces related to agents
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.