High
CVE-2023-25767
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-25765
Sandbox escape in Jenkins Email Extension Plugin
High
CVE-2023-25578
Denial of service vulnerability when parsing multipart request body
High
CVE-2022-42735
Privilege escalation in Apache ShenYu
High
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f
High
CVE-2023-23706
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Cross-Site Request Forgery
Medium
CVE-2023-25461
Wp-Insert <= 2.5.0 Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-25703
Meta Slider and Carousel with Lightbox <= 1.6.2 - Cross-Site Request Forgery
Medium
CVE-2023-25781
Upload File Type Settings Plugin <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23832
Ultimate WP Query Search Filter <= 1.0.10 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-25794
Nooz <= 1.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25782
Service Area Postcode Checker <= 2.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-40198
TeraWallet – For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via admin_options
Medium
CVE-2023-23710
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-25792
WP Open Social <= 5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23889
Quick Paypal Payments <= 5.7.25 - Authenticated (Contributor+) Cross Site Scripting
Medium
CVE-2023-25481
Podlove Subscribe button <= 1.3.7 - Cross-Site Request Forgery via save function
Medium
CVE-2023-25787
WP资源下载管理 <= 1.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25789
Tapfiliate <= 3.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25485
JSON Content Importer <= 1.3.15 - Authenticated (Admin+) Cross Site Scripting
Medium
CVE-2023-1093
OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1- Cross-Site Request Forgery via 'discard' in mooauth_client_applist_page
Medium
CVE-2023-25783
Peadig's Like & Share Button <= 1.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-24005
Inline Tweet Sharer <= 2.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-25785
WP Post Rating <= 2.4.6 - Missing Authorization to Vote Manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.