Medium
CVE-2023-47190
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,543
Medium
CVE-2023-47227
Social Feed | All social media in one place <= 1.5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting]
Medium
CVE-2023-47223
Basic Interactive World Map <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47226
Post Sliders & Post Grids <= 1.0.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-47236
iPages Flipbook < 1.5.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-47188
Simple Job Board <= 2.10.5 - Missing Authorization
Medium
CVE-2023-47187
Animated Rotating Words <= 5.4 - Missing Authorization via save_admin_options
Medium
CVE-2023-47232
WP Affiliate Disclosure <= 1.2.6 - Cross-Site Request Forgery via check_capability
Medium
CVE-2023-50899
Product Catalog Enquiry <= 5.0.2 - Missing Authorization
High
CVE-2023-46725
FoodCoopShop Server-Side Request Forgery vulnerability
Medium
CVE-2021-43849
cordova-plugin-fingerprint-aio DoS vulnerability
Medium
CVE-2023-46925
Reportico Cross-site Scripting vulnerability
Medium
CVE-2023-5917
phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting
Critical
CVE-2023-47204
Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.
High
CVE-2023-46695
An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is su
Medium
CVE-2023-5945
video carousel slider with lightbox 1.0 - Cross-Site Request Forgery
Medium
CVE-2023-48284
Decorator - WooCommerce Email Customizer <= 1.2.7 - Cross-Site Request Forgery
Medium
CVE-2023-5946
Digirisk 6.0.0.0 - Reflected Cross-Site Scripting
Medium
cf34af9d-4de7-498d-8065-c3cc6818b7c4
Advance Menu Manager <= 3.0.6 - Cross-Site Request Forgery
Medium
CVE-2023-47186
Kadence WooCommerce Email Designer <= 1.5.11 - Cross-Site Request Forgery
Medium
CVE-2023-47237
Auto Publish for Google My Business <= 3.7 - Cross-Site Request Forgery
Medium
CVE-2023-5707
SEO Slider <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
04ad816b-0ac0-44b5-928a-5bb3e36523b2
Advance Menu Manager <= 3.0.6 - Missing Authorization
Critical
CVE-2023-40922
Improper neutralization of SQL parameter in KerAwen module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.