Medium
CVE-2023-6501
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2023-7233
GigPress <= 2.3.29 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-22419
concat built-in can corrupt memory in vyper
Critical
CVE-2024-22416
Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation
Medium
CVE-2023-6808
Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-6807
GeneratePress Premium <= 2.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom Meta
High
CVE-2024-0566
Smart Manager - WooCommerce Advanced Bulk Edit, Inventory Management & more... <= 8.27.0 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-0705
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection
Medium
CVE-2024-0699
AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url
Medium
CVE-2024-0618
Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title
Critical
CVE-2023-43985
Improper neutralization of SQL parameter in SunnyToo - Blog Search module for PrestaShop
Critical
CVE-2023-46351
Improper neutralization of SQL parameter in My Presta’s modules : mib for PrestaShop
Medium
CVE-2024-22407
Broken Access Control order API in Shopware
Critical
CVE-2024-22406
Blind SQL injection in shopware
High
CVE-2024-11941
Drupal core - SA-CORE-2024-001
Medium
CVE-2023-36236
Cross-site Scripting in Bagisto
Medium
CVE-2024-22291
Browser Theme Color <= 1.3 - Cross-Site Request Forgery via btc_settings_page
Medium
CVE-2023-6958
WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-6701
Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Medium
CVE-2023-6963
Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass
Medium
CVE-2023-50850
WooCommerce Subscriptions < 5.8.0 - Missing Authorization
Medium
CVE-2024-0586
Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.4 - Authenticated (Contributor+) Stored Cross-Site Scritping
Medium
CVE-2023-6294
Popup Builder <= 4.2.5 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2024-0381
WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.