Medium
CVE-2023-5561
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-45647
Constant Contact Forms by MailMunch <= 2.0.10 - Cross-Site Request Forgery
Medium
CVE-2023-45753
which template file <= 4.8.0 - Cross-Site Request Forgery
Medium
1fc3f65e-5fbe-403b-b7cd-dde16a7e5778
WordPress Core < 6.3.2 – Authenticated (Subscriber+) Arbitrary Shortcode Execution via parse-media-shortcode
Medium
CVE-2023-45638
Eupago Gateway For Woocommerce <= 3.1.9 - Cross-Site Request Forgery via eupago_page_content
Medium
CVE-2023-45758
Amministrazione Trasparente <= 8.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-45645
WP Open Street Map <= 1.25 - Cross-Site Request Forgery via wp_openstreetmaps
High
CVE-2023-45751
Nexter Extension <= 2.0.3 - Authenticated(Editor+) Remote Code Execution via metabox
Medium
CVE-2023-45752
Post Gallery <= 2.3.12 - Cross-Site Request Forgery
Medium
CVE-2023-45754
Easy Testimonial Slider and Form <= 1.0.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Critical
CVE-2023-45375
Improper neutralization of SQL parameter in 01generator.com - PireosPay module for PrestaShop
Critical
CVE-2023-45386
Improper neutralization of SQL parameter in MyPresta.eu - Product Extra Tabs Pro for PrestaShop
Medium
CVE-2023-28635
Defining resource name as integer may give unintended access in vantage6
Medium
CVE-2023-41882
Improper Access Control in vantage6
Low
CVE-2023-41881
vantage6 does not properly delete linked resources when deleting a collaboration
High
CVE-2023-23930
Pickle serialization vulnerable to Deserialization of Untrusted Data
Critical
CVE-2023-44981
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper
High
CVE-2023-5511
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
Medium
CVE-2023-45630
Responsive Image Gallery, Gallery Album <= 2.0.3 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-30781
Tweeple <= 0.9.5 - Reflected Cross-Site Scripting via id
Medium
CVE-2023-45605
Feed Statistics <= 4.1 - Cross-Site Request Forgery via init
Medium
CVE-2023-45633
IMPress Listings <= 2.6.2 - Missing Authorization
Medium
CVE-2023-4836
User Private Files < 2.0.5 - Insecure Direct Object Reference
Medium
CVE-2023-5470
Etsy Shop <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.