Medium
CVE-2023-45000
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,426
Medium
CVE-2024-1791
CodeMirror Blocks <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0449
ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2024-0433
Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_unset_default_card
Medium
CVE-2024-0680
WP Private Content Plus <= 3.6 - Protection Mechanism Bypass
Medium
CVE-2024-1860
Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan <= 4.51 - Missing Authorization to Unauthenticated IP Address Whitelist
Medium
CVE-2024-0975
WordPress Access Control <= 4.0.13 - Improper Access Control to Sensitive Information Exposure via REST API
Medium
CVE-2024-1642
MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk
High
CVE-2023-7247
Login as User or Customer <= 3.8 - Unauthenticated Limited Admin Account Compromise
Medium
CVE-2023-6922
Under Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure
Critical
CVE-2024-1514
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
Medium
CVE-2024-1568
Seraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheck
Critical
CVE-2024-25841
Improper Neutralization of Input During Web Page Generation in Common-Services - So Flexibilite module for PrestaShop
Critical
CVE-2024-25846
Unrestricted Upload of File with Dangerous Type in MyPrestaModules - Product Catalog (CSV, Excel) Import module for PrestaShop
High
CVE-2024-25840
Improper Limitation of a Pathname to a Restricted Directory in Presta World - Account Manager - Sales Representative & Dealers - CRM module for PrestaShop
Critical
CVE-2024-25843
Improper neutralization of SQL parameter in Buy Addons - Import/Update Bulk Product from any Csv/Excel File Pro module for PrestaShop
Medium
CVE-2024-1899
Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing
High
CVE-2024-22201
Connection leaking on idle timeout when TCP congested
Medium
CVE-2024-24564
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using the built-in `extract32(b, start)`, if the `start` index provided has for side effect to update `b`, the byte a
Medium
CVE-2024-26149
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. If an excessively large value is specified as the starting index for an array in `_abi_decode`, it can cause the read posi
Critical
ghsa-84c3-j8r2-mcm8
@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys
Critical
ghsa-hx5q-v6pj-533r
SAML authentication bypass due to missing validation on unsigned SAML messages
Critical
CVE-2024-1735
Armeria SAML authentication bypass due to missing validation on unsigned SAML messages
Low
ghsa-p4m5-32pr-2hqr
PyPop C extensions possible vulnerability: missing arguments and redundant null pointers
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.