High
CVE-2023-49655
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Unrated
drupal-contrib-2023-053
drupal/xsendfile - SA-CONTRIB-2023-053
High
CVE-2023-6378
logback serialization vulnerability
Medium
CVE-2023-49171
Innovs HR <= 1.0.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-49181
WP Event Manager <= 3.1.41 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2023-5931
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.15 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2023-49185
Doofinder for WooCommerce <= 2.1.7 - Reflected Cross-Site Scripting via tab
High
CVE-2023-5939
rtMedia for WordPress, BuddyPress and bbPress WordPress <= 4.6.15 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-49177
which template file <= 5.0.0 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-49184
Parallax Slider Block <= 1.2.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-49168
BP Better Messages <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-49173
10to8 Online Appointment Booking System <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-49190
Site Offline <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-49176
WP Pocket URLs <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-49165
Client Dash <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-49170
Forms by CaptainForm <= 2.5.3 - Reflected Cross-Site Scripting via REQUEST_URI
Medium
CVE-2023-5772
Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery
Medium
CVE-2023-6250
BestWebSoft's Like & Share <= 2.73 - Unauthenticated Password Protected Post Disclosure
Medium
CVE-2023-49178
HDW Player Plugin (Video Player & Video Gallery) <= 5.0 - Cross-Site Scripting
Medium
CVE-2023-49172
BrainCert – HTML5 Virtual Classroom <= 2.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-49188
Track Geolocation Of Users Using Contact Form 7 <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-49182
List all posts by Authors, nested Categories and Title <= 2.8.2 - Cross-Site Scripting
Medium
CVE-2023-49179
Event post <= 5.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-49180
Automatic Youtube Video Posts Plugin <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.