Medium
CVE-2023-47698
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2023-47696
Product Enquiry for WooCommerce <= 3.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-47692
Flo Forms <= 1.0.41 - Missing Authorization via flo_send_test_email
Medium
CVE-2023-47684
Essential Grid <= 3.1.0 - Reflected Cross-Site Scripting
Critical
CVE-2023-40923
Improper neutralization of an SQL parameter in MyPrestaModules - Orders (CSV, Excel) Export PRO module for PrestaShop
Critical
CVE-2023-47308
Improper neutralization of SQL parameter in Active Design - Newsletter Popup PRO with Voucher/Coupon code module for PrestaShop
High
CVE-2023-38519
MainWP <= 4.4.3.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-45857
Axios Cross-Site Request Forgery Vulnerability
High
CVE-2023-45875
An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster.
Medium
CVE-2023-47379
Microweber Cross-site Scripting vulnerability
Medium
CVE-2023-47109
PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block
Unrated
drupal-contrib-2023-051
drupal/graphql - SA-CONTRIB-2023-051
Unrated
drupal-contrib-2023-050
drupal/graphql - SA-CONTRIB-2023-050
Critical
CVE-2023-46732
XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu
Critical
CVE-2023-46731
XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest
High
CVE-2023-39913
Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability
Medium
CVE-2023-4061
wildfly-core Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Medium
CVE-2023-47504
Elementor Website Builder <= 3.16.4 - Missing Authorization to Arbitrary Attachment Read
Medium
CVE-2023-47672
WP Category Post List Widget <= 2.0.3 - Cross-Site Request Forgery via gen_set_page
Medium
CVE-2023-47664
Plainview Protect Passwords <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2023-47665
Plainview Protect Passwords <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-47505
Elementor Website Builder <= 3.16.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_inline_svg()
Medium
CVE-2023-32957
Team Members Showcase <= 1.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47667
WP Full Stripe Free <= 7.0.17 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.