Medium
CVE-2023-49486
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
ghsa-9j5w-2cqc-cwj9
Magento LTS vulnerable to Stored XSS via TinyMCE WYSIWYG Editor
High
CVE-2023-26158
mockjs vulnerable to Prototype Pollution via the Util.extend function
High
CVE-2023-48122
Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method
Low
CVE-2023-6599
Microweber missing standardized error handling mechanism
Medium
CVE-2023-6583
Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Functionality
Medium
a7cf1c70-9778-4b50-b494-d0b1d0277b35
EmbedPress <= 3.9.4 - Missing Authorization
Medium
CVE-2023-6120
Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal
Medium
CVE-2023-5756
Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action
Medium
CVE-2023-6485
Html5 Video Player <= 2.5.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-6496
Manage Notification E-mails <= 1.8.5 - Missing Authorization
Medium
CVE-2023-47440
Directory Traversal in Gladys Assistant
Critical
CVE-2023-50164
Apache Struts vulnerable to path traversal
Medium
CVE-2023-6568
A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malici
Medium
CVE-2023-6566
Microweber Business Logic Errors
Medium
CVE-2023-49855
BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter <= 1.49.3 - Cross-Site Request Forgery
Medium
CVE-2023-40003
WP Project Manager <= 2.6.7 - Missing Authorization
Critical
CVE-2023-6271
Backup Migration <= 1.3.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-49859
Login With Ajax <= 4.1 - Missing Authorization
Medium
CVE-2023-49850
WP Simple HTML Sitemap <= 2.7 - Missing Authorization
Medium
CVE-2023-49838
Multiple Themes by KlbTheme <= (Various Versions) - Cross-Site Request Forgery
Medium
CVE-2023-49852
Responsive Slick Slider WordPress <= 1.5 - Authenticated (Contributor+) Content Injection
High
CVE-2023-6373
ArtPlacer Widget <= 2.20.6 - Authenticated (Editor+) SQL Injection
Medium
CVE-2023-49860
WP Project Manager <= 2.6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.