Medium
CVE-2023-48751
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-39305
Yet Another Stars Rating <= 3.4.3 - Missing Authorization via init
Medium
CVE-2023-6295
SiteOrigin Widgets Bundle < 1.51.0 - Authenticated (Admin+) Local File Inclusion
Critical
CVE-2023-6360
My Calendar <= 3.4.21 - Unauthenticated SQL Injection
High
CVE-2023-6293
sequelize-typescript Prototype Pollution vulnerability
Medium
CVE-2023-49276
Attribute Injection leading to XSS(Cross-Site-Scripting)
Medium
ghsa-rqr8-pxh7-cq3g
Ethereum ABI decoder DoS when parsing ZST
High
CVE-2023-48796
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.
High
CVE-2023-5886
Export any WordPress data to XML/CSV < 1.4.1 & WP ALL Export Pro < 1.8.6 - Cross-Site Request Forgery to PHAR Deserialization
Medium
CVE-2023-48746
Community by PeepSo <= 6.2.6.0 - Reflected Cross-Site Scripting
Critical
CVE-2023-6584
WP JobSearch <= 2.3.3 - Authentication Bypass
Medium
CVE-2023-5691
Chatbot for WordPress <= 2.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-48333
Booster for WooCommerce <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+) Order Information Disclosure
High
CVE-2023-5882
Export any WordPress data to XML/CSV < 1.4.1 & WP ALL Export Pro < 1.8.6 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2023-48745
Captcha Code <= 2.9 - Captcha Bypass
Medium
CVE-2023-48748
Salient Core <= 2.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-4311
Vrm 360 3D Model Viewer <= 1.2.1 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2023-6505
Prime Mover <= 1.9.2 - Sensitive Information Exposure via Directory Listing
Critical
CVE-2023-6585
WP JobSearch <= 2.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-48744
Availability Calendar <= 1.2.6 - Cross-Site Request Forgery via add_availability_calendar_create_admin_page()
Medium
CVE-2023-4724
Export any WordPress data to XML/CSV < 1.4.1 & WP ALL Export Pro < 1.8.6 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2023-40680
Yoast SEO <= 21.0 - Authenticated (Seo Manager+) Stored Cross-Site Scripting
Medium
CVE-2023-48749
Salient Core <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-48743
Simply Exclude <= 2.0.6.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.