Medium
CVE-2023-40015
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-41046
Velocity execution without script right through VelocityCode and VelocityWiki property
High
CVE-2023-41049
Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client
High
CVE-2023-39308
User Feedback <= 1.0.7 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2023-41685
Woocommerce Support System <= 1.2.1 - Authenticated (Administrator+) SQL Injection via 'orderby'
Medium
CVE-2023-41693
MyCryptoCheckout <= 2.125 - Cross-Site Request Forgery
High
CVE-2023-34385
Export Import Menus <= 1.8.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
be837a77-9b25-43af-aaba-94a8aa59e7e3
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-3547
All in One B2B for WooCommerce <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-41672
Hide admin notices – Admin Notification Center <= 2.3.2 - Cross-Site Request Forgery
Medium
CVE-2023-41670
Use Memcached <= 1.0.5 - Cross-Site Request Forgery
Critical
CVE-2023-4703
All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation
Medium
CVE-2023-41690
WiserNotify Social Proof <= 2.5 - Missing Authorization
Medium
CVE-2023-32293
WRC Pricing Tables <= 2.3.7 - Missing Authorization
High
CVE-2023-41686
Woocommerce Support System <= 1.2.2 - Missing Authorization
High
CVE-2023-34383
WP Project Manager <= 2.6.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-41694
Realbig <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2023-41667
WP-dTree <= 4.4.5 - Cross-Site Request Forgery
Medium
5dfc145e-d2d4-4137-a5c6-dec2ebb41876
rtMedia for WordPress, BuddyPress and bbPress <= 4.6.14 - Missing Authorization to Settings Update
Medium
CVE-2023-41688
Bulk NoIndex & NoFollow Toolkit <= 1.5 - Missing Authorization
Medium
CVE-2023-41684
SIS Handball <= 1.0.45 - Cross-Site Request Forgery
Medium
CVE-2023-31234
Tilda Publishing <= 0.3.23 - Missing Authorization
Medium
CVE-2023-41669
Live News <= 1.06 - Cross-Site Request Forgery
Medium
CVE-2023-41683
TelSender <= 1.14.11 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.