Medium
CVE-2023-0726
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-0728
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
Medium
CVE-2023-0730
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
Medium
CVE-2023-0716
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
Medium
CVE-2023-0717
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
Medium
CVE-2023-0718
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
Medium
CVE-2023-0713
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
Medium
CVE-2023-0722
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
High
CVE-2023-0477
Auto Featured Image (Auto Post Thumbnail) <= 3.9.15 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2023-0712
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
Medium
CVE-2023-0724
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
Unrated
765
J-BusinessDirectory - Other
Critical
CVE-2015-10073
tinymighty WikiSEO is vulnerable to cross-site scripting via modifyHTML function
Medium
CVE-2020-36660
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the comp
High
CVE-2022-25855
create-choo-app3 is vulnerable to Command Injection via the devInstall function
High
CVE-2022-25853
semver-tags is vulnerable to Command Injection via the getGitTagsRemote function
Medium
ee50731f-696f-4e9f-a930-05b2b23752de
Cost of Goods for WooCommerce <= 2.8.6 - Cross-Site Request Forgery in save_costs
Medium
CVE-2023-0685
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
Medium
df1a3425-b1d7-4914-ab19-c215d4e845ea
Album and Image Gallery plus Lightbox <= 1.6.2 - Cross-Site Request Forgery
Medium
CVE-2022-46798
ShopLentor <= 2.5.1 - Cross-Site Request Forgery to Post Updates
Medium
CVE-2022-46848
Visualizer <= 3.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-45068
Mercado Pago payments for WooCommerce <= 6.3.1 - Cross-Site Request Forgery
High
CVE-2023-0381
GigPress <= 2.3.28 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-46796
CURCY <= 2.1.25 - Missing Authorization to Currency Exchange Retrieval
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.