Critical
CVE-2023-5212
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2023-5414
Icegram Express <= 5.6.23 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Read
Critical
CVE-2023-5241
AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file
Critical
CVE-2023-45603
User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload
Critical
CVE-2023-5360
Royal Elementor Addons and Templates <= 1.3.78 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-4797
Newsletter Lite <= 4.9.2 - Authenticated (Admin+) Command Injection
High
CVE-2023-31215
Dropshipping & Affiliation with Amazon <= 2.1.2 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2023-5201
OpenHook <= 4.3.0 - Authenticated (Subscriber+) Remote Code Execution via Shortcode
High
CVE-2023-40219
Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) Arbitrary File Upload
Low
CVE-2023-5957
Ni Purchase Order(PO) For WooCommerce <= 1.2.1 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-4938
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4941
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4926
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
Medium
CVE-2023-4924
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
Medium
CVE-2023-4923
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
Medium
CVE-2023-3279
WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2023-4935
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Deletion
Medium
CVE-2023-4920
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-4937
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Low
CVE-2023-4933
WP Job Openings <= 3.4.2 - Information Exposure
Medium
CVE-2023-4940
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Medium
CVE-2023-4943
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
Medium
CVE-2023-4942
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
Low
CVE-2023-4505
Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.