Medium
CVE-2023-24007
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-25038
For the visually impaired <= 0.58 - Cross-Site Request Forgery to Plugin Settings Changes
Medium
CVE-2023-1089
Coupon Zen <= 1.0.5 - Cross-Site Request Forgery to Plugin Activation
Medium
CVE-2023-25982
Simple YouTube Responsive <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-26016
Simple Portfolio Gallery <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-26012
Custom Login Page <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25987
My YouTube Channel <= 3.23.3 - Cross-Site Request Forgery to Cache Deletion
Medium
CVE-2023-26010
WPMobile.App — Android and iOS Mobile Application <= 11.18 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-26009
Houzez Login Register <= 2.6.3 - Privilege Escalation
High
CVE-2022-45377
Drag and Drop Multiple File Upload for WooCommerce <= 1.0.8 - Cross-Site Request Forgery in upload and delete_file
Medium
CVE-2023-24416
All In One Favicon <= 4.7 - Authenticated(Admin+) Directory Traversal
Critical
CVE-2023-25813
Sequelize vulnerable to SQL Injection via replacements
High
CVE-2023-25570
Apollo has potential access control security issue in eureka
Medium
CVE-2023-25569
apollo-portal has potential CSRF issue
Medium
CVE-2023-0846
OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting
Critical
CVE-2023-25158
GeoTools OGC Filter SQL Injection Vulnerabilities
Critical
CVE-2023-25157
GeoServer OGC Filter SQL Injection Vulnerabilities
Medium
CVE-2023-0949
Cross-site Scripting (XSS) - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5.
Critical
CVE-2023-25805
Versionn Command Injection Vulnerability
Medium
CVE-2023-26008
Top 10 – Popular posts plugin - <= 3.2.4 - Authenticated(Admin+) Stored Cross-Site Scripting
High
CVE-2023-25967
Community by PeepSo <= 6.0.2.0 - Cross-Site Request Forgery leading to Plugin/Subscription Deletion
High
CVE-2023-0340
Custom Content Shortcode <= 4.0.2 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
cbff7ec1-535d-43bf-be61-83a1e7625c77
Top 10 – Popular posts plugin for WordPress <= 3.2.4 - Missing Authorization on tptn_chart_data
Medium
CVE-2023-0273
Custom Content Shortcode <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.