Critical
CVE-2023-7152
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Medium
CVE-2023-7148
ShifuML shifu code injection vulnerability
Medium
CVE-2023-52176
Malware Scanner <= 4.7.1 - IP Spoofing
Medium
CVE-2023-52186
WooCommerce Product Vendors <= 2.2.2 - Missing Authorization
Medium
CVE-2023-52187
Image Source Control <= 2.17.0 - Sensitive Information Exposure via Log File
Medium
CVE-2023-52184
WP Job Portal <= 2.0.6 - Cross-Site Request Forgery
Critical
CVE-2023-52181
Theme per user <= 1.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-7170
RSVP Events <= 2.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-52177
Integrate Google Drive <= 1.3.3 - Missing Authorization via save_settings
Medium
CVE-2023-52175
Auto Amazon Links <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6384
WP User Profile Avatar <= 1.0.0 - Authenticated (Author+) Insecure Direct Object Reference to Avatar Deletion/Update
Medium
CVE-2023-52178
WP Affiliate Disclosure <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via $id
Medium
CVE-2023-6447
EventPrime <= 3.3.5 - Missing Authorization to Private Event Disclosure
High
CVE-2023-7082
Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2023-52182
ARI Stream Quiz <= 1.3.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2023-52185
Everest Backup <= 2.1.9 - Sensitive Information Exposure via Log File
High
CVE-2023-52180
Recipe Maker For Your Food Blog from Zip Recipes <= 8.1.0 - Authenticated(Contributor+) SQL Injection
Low
CVE-2023-52084
Winter CMS Stored XSS through Backend ColorPicker FormWidget
Low
CVE-2023-52083
Winter CMS Stored XSS through privileged upload of Media Manager file followed by renaming
High
CVE-2023-5236
Infinispan circular object references causes out of memory errors
High
CVE-2023-52079
msgpackr's conversion of property names to strings can trigger infinite recursion
Medium
CVE-2023-5384
Infinispan caches credentials in clear text
Medium
CVE-2023-6681
A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. Th
High
CVE-2023-52133
Most And Least Read Posts Widget <=2.5.16 - Authenticated(Contributor+) SQL Injection via Widget settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.