High
CVE-2023-43665
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,538
High
CVE-2023-44271
An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of
Medium
CVE-2023-41164
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large n
High
CVE-2023-31579
Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key
Medium
CVE-2023-47231
ShortCodes UI <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47181
Email Templates <= 1.4.2 - Cross-Site Request Forgery via send_test_email
Medium
e881ba2f-0e88-4c7b-aa0d-84e816019db9
Product Catalog Mode For Woocommerce <= 5.0.2 - Missing Authorization
High
CVE-2023-47224
WP Travel <= 7.7.0 - Missing Authorization via Multiple AJAX Actions
Medium
CVE-2023-47239
Easy PayPal Shopping Cart <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47229
Download Top 25 Social Icons <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47225
Short URL <= 1.6.8 - Missing Authorization via multiple AJAX functions
Medium
CVE-2023-47191
Youzify <= 1.2.2 - Insecure Direct Object Reference
Medium
CVE-2023-47238
Top 10 <= 3.3.2 - Cross-Site Request Forgery via edit_count_ajax
Medium
CVE-2023-47228
Layer Slider <= 1.1.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5942
Medialist <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-5659
Interact: Embed A Quiz On Your Site <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47189
Defender Security <= 4.2.0 - Masked Login Area Security Feature Bypass
Medium
CVE-2023-23702
Comments Ratings <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5703
Gift Up Gift Cards for WordPress and WooCommerce <= 2.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47190
Apollo13 Framework Extensions <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47227
Social Feed | All social media in one place <= 1.5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting]
Medium
CVE-2023-47223
Basic Interactive World Map <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47226
Post Sliders & Post Grids <= 1.0.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-47236
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.