High
CVE-2023-43667
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2023-43668
Authorization Bypass in Apache InLong
Medium
CVE-2023-43666
Insufficient Verification of Data Authenticity in Apache InLong
High
CVE-2023-5591
SQL injection in librenms/librenms
Medium
CVE-2023-5181
WP Discord Invite <= 2.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46076
WooCommerce PDF Invoice Builder <= 1.2.103 - Reflected Cross-Site Scripting
Medium
fadc1374-fe4d-414a-af84-1a4de5b89807
404 Solution <= 2.33.0 - Sensitive Information Exposure
High
CVE-2023-5355
Awesome Support <= 6.1.4 - Authenticated (Submitter+) Arbitrary File Deletion
Medium
CVE-2023-5354
Awesome Support <= 6.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-46071
Protección de Datos RGPD <= 3.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-5070
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure
Medium
CVE-2023-46074
FreshMail For WordPress <= 2.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-46082
Broken Link Checker | Finder <= 2.4.2 - Missing Authorization via moblc_auth_save_settings
Medium
CVE-2023-5602
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgery
Medium
CVE-2023-5454
Templately <= 2.2.5 - Improper Authorization to Arbitrary Post Deletion
Medium
CVE-2023-46083
Contact Form builder with drag & drop - Kali Forms <= 2.3.27 - Missing Authorization via Contact Form
Medium
CVE-2023-5530
Ninja Forms Contact Form <= 3.6.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46070
EG-Attachments <= 2.1.3 - Reflected Cross-Site Scripting via 'paged'
Medium
CVE-2023-46066
Mediabay <= 1.6 - Authenticated (Editor+) Stored Cross-Site Scripting Vulnerability
Medium
CVE-2023-46068
Maileon <= 2.16.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46080
ApplyOnline – Application Form Builder and Manager <= 2.5.2 - Missing Authorization
Medium
CVE-2023-5352
Awesome Support <= 6.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification
Medium
CVE-2023-46073
DX Delete Attached Media <= 2.0.5.1 - Cross-Site Request Forgery via add_to_base
Medium
CVE-2023-46078
Serial Numbers for WooCommerce – License Manager <= 1.6.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.