Medium
CVE-2022-47422
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-23806
WordPress Custom Settings <= 1.0 - Authenticated(Admin+) Stored Cross-Site Scripting
High
CVE-2023-25986
PayGreen – Ancienne version <= 4.10.2 - Cross-Site Request Forgery
Medium
CVE-2022-38063
Social Login WP <= 5.0.0.0 - Cross-Site Request Forgery
Medium
CVE-2023-25993
Top 10 – Popular posts plugin for WordPress <= 3.2.3 - Missing Authorization on tptn_ajax_clearcache
Low
CVE-2023-23814
CP Multi View Event Calendar <= 1.4.13 - Insufficient Authorization
Critical
CVE-2014-125087
java-xmlbuilder vulnerable to XML External Entity Reference
Medium
CVE-2023-0914
Pixelfed may allow unauthorized actor to view private posts
Medium
CVE-2023-0901
Pixelfed allows user enumeration via reset password functionality
Medium
CVE-2023-24769
Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts o
Medium
CVE-2022-48115
Cross-site Scripting in jspreadsheet
High
CVE-2023-23923
Moodle Improper Access Control vulnerability
Medium
CVE-2023-23922
Moodle Cross-site Scripting vulnerability
Medium
CVE-2023-23921
Moodle Cross-site Scripting vulnerability
High
CVE-2021-33926
Server-Side Request Forgery in Plone CMS
Unrated
CVE-2021-33226
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file.
Medium
CVE-2023-0880
Misinterpretation of Input in thorsten/phpmyfaq
High
CVE-2023-0877
Code Injection in froxlor/froxlor
Medium
CVE-2023-25991
RegistrationMagic <= 5.1.9.2 - Cross-Site Request Forgery leading to Form Metadata Deletion
Medium
f0c7324f-4c22-44e0-8d2a-9b95fd89467d
vSlider Multi Image Slider <= 4.1.2 - Missing Authorization
High
CVE-2023-0895
WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-23817
Simple PDF Viewer <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via googlepdf Shortcode
Medium
CVE-2023-23717
Portfolio Slideshow <= 1.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23827
Google Maps v3 Shortcode <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.