Low
CVE-2023-22733
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-22727
CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection
Medium
CVE-2023-0323
pimcore is vulnerable to cross-site scripting via "title field " in data objects
Medium
CVE-2023-0410
@builder.io/qwik vulnerable to Cross-site Scripting
Medium
CVE-2023-23976
RegistrationMagic <= 5.1.9.2 - Improper Authorization to Price Change
Medium
CVE-2023-23983
Responsive Vertical Icon Menu <= 1.5.8 - Cross-Site Request Forgery
Medium
CVE-2023-23989
RegistrationMagic <= 5.1.9.2 - Missing Authorization to Unauthenticated Content Injection
Medium
CVE-2023-22700
PixelYourSite <= 9.3.0 - Cross-Site Request Forgery
Critical
CVE-2022-47615
LearnPress <= 4.1.7.3.2 - Unauthenticated Local File Inclusion
High
CVE-2022-47593
RapidLoad Power-Up for Autoptimize <= 1.6.35 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2022-4445
FL3R FeelBox <= 8.1 - Unauthenticated SQL Injection
Medium
CVE-2022-47612
Participants Database <= 2.4.5 - Cross Site Request Forgery
Medium
CVE-2023-23675
WP Smart Preloader <= 1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23870
Responsive Vertical Icon Menu <= 1.5.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-23790
Pods <= 2.9.10.2 - Cross-Site Request Forgery
Medium
CVE-2022-47596
Media Library Categories <= 1.9.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-23974
Quick Event Manager <= 9.7.4 - Cross-Site Request Forgery
Medium
CVE-2023-23890
WP Airbnb Review Slider <= 3.2 - Cross-Site Request Forgery
Medium
CVE-2023-23992
AutomatorWP <= 2.5.0 - Cross Site Request Forgery
Medium
CVE-2022-47425
ARMember <= 3.4.10 - Missing Access Control leading to Authenticated (Subscriber+) Sensitive Information Disclosure
Medium
CVE-2023-23972
Social Like Box and Page by WpDevArt <= 0.8.39 - Authenticated (Admin+) Stored Cross Site Scripting
Critical
CVE-2022-45808
LearnPress <= 4.1.7.3.2 - Unauthenticated SQL Injection
Medium
CVE-2023-23878
WP MAPS <= 4.3.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-23681
Image Hover Effects For WPBakery Page Builder <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.