Medium
CVE-2023-0091
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-24913
Java Merge-sort Insecure Temporary File vulnerability
Medium
eedced7b-bda4-4292-8e87-fc3e37e4868b
GamiPress – Button <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0236
Tutor LMS <= 2.0.9 - Reflected Cross-Site Scripting
High
CVE-2023-0174
WP VR <= 8.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0170
Html5 Audio Player <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23491
Quick Event Manager <= 9.7.4 - Reflected Cross-Site Scripting
High
CVE-2022-4677
Leaflet Maps Marker < 3.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-0176
Giveaways and Contests by RafflePress <= 1.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-23490
Survey Maker < 3.1.2 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2023-23488
Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection
Medium
7c6b7dca-dd82-45b4-b9e2-0b44201396e9
GamiPress <= 2.5.0 - Cross-Site Request Forgery
High
CVE-2023-0254
Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-0178
Annual Archive <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-23489
Easy Digital Downloads < 3.1.0.4 - SQL Injection
High
CVE-2022-4824
WP Blog and Widget <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23492
Login with phone number <= 1.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-0171
jQuery T(-) Countdown Widget <= 2.3.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
Medium
ghsa-m95x-m25c-w9mp
XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Medium
ghsa-7vcx-v65q-9wpg
XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument
Medium
ghsa-pxqj-xrv5-qvjf
XML-RPC for PHP's debugger vulnerable to possible XSS attack
Medium
ghsa-h6p3-p4vx-wr8q
dompurify vulnerable to Cross-site Scripting
Medium
ghsa-pgjv-jrg2-gq3v
dompurify vulnerable to Cross-site Scripting
High
CVE-2023-22493
RSSHub SSRF vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.