Medium
CVE-2023-0479
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-44738
Posts and Users Stats <= 1.1.3 - Authenticated (Subscriber+) CSV Injection
Medium
CVE-2023-25059
avalex – Automatisch sichere Rechtstexte <= 3.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-45376
Side Cart Woocommerce (Ajax) < 2.1 - Cross-Site Request Forgery
Medium
CVE-2022-45357
1003 Mortgage Application <= 1.75 - Unauthenticated CSV Injection
Medium
CVE-2023-25066
FV Flowplayer Video Player <= 7.5.30.7210 - Cross-Site Request Forgery
Medium
CVE-2023-24402
WP Booking System <= 2.0.18 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-25060
Album and Image Gallery plus Lightbox <= 1.6.2 - Missing Authorization
Medium
CVE-2022-45804
Robo Gallery <= 3.2.9 - Cross-Site Request Forgery via getPluginStatus
Medium
CVE-2023-25064
WP htpasswd <= 1.7 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-23815
Multi-column Tag Map <= 17.0.24 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-24404
Marketing Performance <= 2.0.0 - Unauthenticated Stored Cross Site Scripting
Medium
CVE-2023-25065
WP Tabs <= 2.1.14 - Cross Site Request Forgery
Medium
CVE-2022-45076
Flexible Elementor Panel <= 2.3.8 - Cross Site Request Forgery
High
CVE-2022-45831
Image Hover Effects Plugin - Caption Hover with Carousel <= 2.8 - Unauthenticated Stored Cross Site Scripting
Medium
CVE-2023-0043
Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-4795
Galleries by Angie Makes <= 1.67 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-25068
Magazine Edge <= 1.13 - Authenticated (Subscriber+) Arbitrary Plugin Activation
Medium
CVE-2022-47171
IP Vault – WP Firewall <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-0084
Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-24398
EZP Coming Soon Page <= 1.0.7.3 - Authenticated (Admin+) Stored Cross Site Scripting
High
CVE-2023-23969
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-s
Medium
CVE-2022-24894
Symfony storing cookie headers in HttpCache
Medium
CVE-2022-24895
Symfony vulnerable to Session Fixation of CSRF tokens
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.