Medium
CVE-2023-41668
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-41687
Goods Catalog <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-41666
Stock Quotes List <= 2.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4636
WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-41692
Attorney <= 3 - Reflected Cross-Site Scripting
Low
CVE-2023-3664
FileOrganizer <= 1.0.3 - Authenticated (Admin+) Arbitrary File Access
High
CVE-2023-40771
DataEase vulnerable to SQL injection
Critical
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
High
CVE-2023-39685
hson-java vulnerable to denial of service
Critical
CVE-2023-41652
RSVPMarker <= 10.6.6 - Unauthenticated SQL Injection
Medium
CVE-2023-41660
WP Migration Plugin DB & Files – WP Synchro <= 1.9.1 - Cross-Site Request Forgery
Medium
CVE-2023-41654
authLdap <= 2.5.8 - Cross-Site Request Forgery
Medium
CVE-2023-41663
WP Bannerize Pro <= 1.6.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-4281
Activity Log <= 2.8.7 - IP Address Spoofing
Medium
CVE-2023-4718
Font Awesome 4 Menus <= 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-41651
Multi-column Tag Map <= 17.0.26 - Cross-Site Request Forgery
Medium
CVE-2023-41650
Remove/hide Author, Date, Category Like Entry-Meta <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2023-35037
Surfer <= 1.3.2.357 - Missing Authorization
Medium
CVE-2023-41662
WP-dTree <= 4.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-41657
HollerBox <= 2.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41653
Sermon'e – Sermons Online <= 1.0.0 - Reflected Cross-Site Scripting
Low
CVE-2023-41655
authLdap <= 2.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41656
Better Elementor Addons <= 1.3.8 - Missing Authorization
Medium
CVE-2023-41649
Ovic Product Bundle <= 1.1.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.