Critical
CVE-2023-5340
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-5343
Popup Box – Best WordPress Popup Plugin <= 3.7.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5609
Seraphinite Accelerator <= 2.20.28 - Reflected Cross-Site Scripting via 'rt'
Medium
CVE-2023-5610
Seraphinite Accelerator <= 2.20.28 - Arbitrary Redirect via 'redir'
Medium
CVE-2023-4799
Magic Embeds <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5119
Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.27.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2023-5640
Article Analytics <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2023-4808
WP Post Popup <= 3.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-4970
PubyDoc <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46776
Auto Excerpt everywhere <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2023-4824
WooHoo Newspaper Magazine Theme <= 2.5.3 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-5140
Bonus for Woo <= 5.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-5509
myStickymenu <= 2.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Lead Deletion
High
CVE-2023-46234
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
Medium
CVE-2023-43792
baserCMS Code Injection Vulnerability in Mail Form Feature
Medium
CVE-2023-43649
baserCMS CSRF vulnerability in Content preview Feature
Medium
CVE-2023-43648
baserCMS Directory Traversal vulnerability in Form submission data management Feature
Medium
CVE-2023-43647
baserCMS Cross-site Scripting vulnerability in File upload Feature
Medium
CVE-2023-29009
baserCMS Cross-site Scripting Vulnerability in Favorites Feature
High
CVE-2023-31418
Elasticsearch vulnerable to Uncontrolled Resource Consumption
Medium
CVE-2023-31417
Elasticsearch allows insertion of sensitive information into log files when using deprecated URIs
Medium
CVE-2023-31419
Elasticsearch vulnerable to stack overflow in the search API
Medium
CVE-2023-46778
Auto Limit Posts Reloaded <= 2.5 - Cross-Site Request Forgery
Medium
CVE-2023-5817
Neon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.