Medium
CVE-2023-5641
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,538
Medium
CVE-2023-51396
Brizy <= 2.4.29 - Cross-Site Scripting
Medium
CVE-2023-5239
Security & Malware scan by CleanTalk <= 2.120 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2023-5209
WordPress Online Booking and Scheduling Plugin – Bookly <= 22.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-5325
Woocommerce Vietnam Checkout <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5506
ImageMapper <= 1.2.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page/Post Deletion via imgmap_delete_area_ajax
Medium
CVE-2023-5577
Bitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47666
Code Snippets <= 3.5.0 - Cross-Site Request Forgery via load
Medium
CVE-2023-5525
Limit Login Attempts Reloaded <= 2.25.25 - Missing Authorization
Medium
CVE-2023-5669
Featured Image Caption <= 0.8.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5743
Telephone Number Linker <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4642
kk Star Ratings <= 5.4.5 - Race Condition to Multiple User Voting
Low
CVE-2017-20187
Magnesium-PHP Injection vulnerability
Low
CVE-2023-6160
LifterLMS <= 7.4.2 - Authenticated(Administrator+) Directory Traversal to Arbitrary CSV File Deletion
Low
ghsa-gv2c-5g79-h73c
Ibexa ezplatform-kernel download route allows filename change
Low
ghsa-g95c-xc83-8353
Ibexa DXP Download route allows filename change
Critical
ghsa-7crc-r3wg-cfgf
Json response for search reveals Solr credentials
Critical
ghsa-v6xp-ccvx-w52m
Json response for search reveals Solr credentials
High
CVE-2023-45827
Prototype Pollution(PP) vulnerability in setByPath
High
CVE-2023-39345
Unauthorized Access to Private Fields in User Registration API
Low
ghsa-946c-f9w6-2c25
Download route allows filename change in eZpublish kernel
High
CVE-2023-46947
Subrion remote command execution vulnerability
Medium
CVE-2023-4043
Eclipse Parsson Denial of Service vulnerability
Medium
CVE-2023-5763
Eclipse Glassfish remote code execution issue
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.