Medium
CVE-2023-5863
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Critical
CVE-2023-46502
OpenCRX allows a remote attacker to execute arbitrary code via a crafted request
Medium
CVE-2023-4247
GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation
Medium
CVE-2023-4246
GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation
High
CVE-2023-47179
WooODT Lite <= 2.4.6 - Missing Authorization to Arbitrary Options Update
Medium
88163d55-ab97-4697-a25b-d54615e2a843
Solid Security Basic <= 9.0.0 - Unauthenticated Login Page Disclosure
High
CVE-2023-47180
Finale Lite <= 2.16.0 - Missing Authorization to Content Deletion
Critical
CVE-2023-47178
The Plus Addons for Elementor Pro <= 5.2.8 - Unauthenticated Local File Inclusion
Medium
CVE-2023-47177
Linker <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4823
WP Meta and Date Remover < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-47184
Admin Bar & Dashboard Control <= 1.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-47181
IdeaPush <= 8.52 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4248
GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion
Medium
CVE-2023-47182
Login Screen Manager <= 3.5.2 - Cross-Site Request Forgery
Medium
CVE-2023-4686
WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2023-2707
gAppointments <= 1.9.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-47185
wpDiscuz <= 7.6.11 - Unauthenticated Stored Cross-Site Scripting via Comment Uploaded Image Filename
High
CVE-2023-46352
Exposure of Private Personal Information to an Unauthorized Actor in Smart Modules - Pixel Plus: Events + CAPI + Pixel Catalog for Facebook module for PrestaShop
High
CVE-2023-44025
Improper neutralization of SQL parameter in Addify - Free Gifts module for PrestaShop
High
CVE-2023-46245
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
High
CVE-2023-46240
CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment
Medium
CVE-2023-5842
Cross-site Scripting (XSS) in dolibarr/dolibarr
High
CVE-2023-5099
HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
High
CVE-2023-5433
Message ticker <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.