Medium
CVE-2023-22488
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2023-22487
Flarum post mentions can be used to read any post on the forum without access control
High
CVE-2023-0163
convict vulnerable to Prototype Pollution
Medium
CVE-2021-46871
phoenix_html allows Cross-site Scripting in HEEx class attributes
Medium
CVE-2023-22899
Zip4j Origin Validation Error
Medium
CVE-2023-54395
PocketMine-MP vulnerable to denial-of-service by sending large modal form responses
Medium
CVE-2022-4709
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import
Medium
CVE-2022-4825
WP-ShowHide <= 1.04 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-23712
User Meta Manager <= 3.4.9 - Cross Site Request Forgery
Medium
CVE-2022-4700
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation
Medium
CVE-2022-4702
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation
Medium
CVE-2022-4711
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update
Medium
CVE-2022-4626
PPWP – WordPress Password Protect Page <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4708
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification
Medium
CVE-2022-4710
Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting
Medium
CVE-2023-0144
Event Manager and Tickets Selling Plugin for WooCommerce <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4833
YourChannel <= 1.2.1 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-0095
Page View Count <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4704
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import
Medium
CVE-2022-4703
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion
Medium
CVE-2022-4701
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation
Medium
CVE-2022-4707
Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation
Medium
CVE-2022-4670
PDF.js Viewer <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4838
Clean Login <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.