Medium
CVE-2023-49736
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-49006
Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability
High
CVE-2023-6940
mlflow Command Injection vulnerability
Medium
CVE-2014-125107
Corveda PHPSandbox Protection Mechanism Failure vulnerability
Medium
CVE-2023-50829
Loan Repayment Calculator and Application Form <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-47527
WP Edit Username <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50835
Advanced Category Template <= 0.1 - Cross-Site Request Forgery
Medium
CVE-2023-50377
Simple Counter <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50823
CSS & JavaScript Toolbox <= 11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-7198
WP Dashboard Notes <= 1.0.10 - Insecure Direct Object References to Authenticated Private Note Deletion
Medium
CVE-2023-50832
Multi Step Form <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-50825
iframe Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47525
Event Management Tickets Booking <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50831
CURCY – Multi Currency for WooCommerce <= 2.2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50830
Seos Contact Form <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-50833
Colibri Page Builder <= 1.0.240 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-50822
Currency Converter Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-50827
Accredible Certificates & Open Badges <= 1.4.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50376
Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-50834
WooCommerce Menu Extension <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50824
Insert or Embed Articulate Content into WordPress <= 4.3000000021 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-50828
Ultimate Dashboard <= 3.7.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50826
Menu Image, Icons made easy <= 3.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Critical
CVE-2023-50027
Improper neutralization of SQL parameter in Buy Addons - Best Zoom Magnifier Effect - BAZoom Magnifier module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.