Medium
CVE-2023-40170
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
Medium
CVE-2023-39062
Spipu HTML2PDF vulnerable to cross-site scripting
High
CVE-2023-40590
GitPython untrusted search path on Windows systems leading to arbitrary code execution
High
CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
Medium
CVE-2023-30471
WP Search Analytics <= 1.4.7 - Reflected Cross-Site Scripting via 'render_stats_page'
High
CVE-2023-4300
Import XML and RSS Feeds <= 2.1.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-4471
Order Tracking Pro <= 3.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-25483
Easy Coming Soon <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-27448
MakeStories (for Google Web Stories) <= 3.0.2 - Cross-Site Request Forgery via 'ms_set_options'
Medium
CVE-2023-30493
Ultimate Addons for Contact Form 7 <= 3.1.0 - Reflected Cross-Site Scripting via 'page'
Critical
CVE-2023-4521
Import XML and RSS Feeds <= 2.1.4 - Unauthenticated Remote Code Execution
High
CVE-2023-4238
Prevent files / folders access <= 2.5.1 - Authenticated (Administrator+) Arbitrary File Upload in mo_media_restrict_page
Medium
CVE-2023-27615
WP Super Minify <= 1.5.1 - Cross-Site Request Forgery via 'wpsmy_admin_options'
High
CVE-2023-4549
DoLogin Security <= 3.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2023-40204
Folders <= 2.9.2 - Authenticated (Author+) Arbitrary File Upload in handle_folders_file_upload
Medium
CVE-2023-27428
WP Users Media <= 4.2.3 - Missing Authorization via wpusme_save_settings
Medium
CVE-2023-4500
Order Tracking Pro <= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3226
Popup Builder <= 4.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-27628
Sitekit <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe ' shortcode
Medium
CVE-2023-29235
Maintenance Switch <= 1.5.2 - Cross-Site Request Forgery via 'admin_action_request'
Medium
CVE-2023-4476
Locatoraid Store Locator <= 3.9.23 - Reflected Cross-Site Scripting
Medium
CVE-2023-25033
Social Share Boost <= 4.5 - Cross-Site Request Forgery via 'syntatical_settings_content'
Medium
CVE-2023-30472
URL Shortener by MyThemeShop <= 1.0.17 - Reflected Cross-Site Scripting via 'page'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.