Medium
CVE-2023-40037
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2023-37914
XWiki Platform privilege escalation (PR)/RCE from account through Invitation subject/message
Medium
CVE-2023-4422
Cockpit Cross-site Scripting vulnerability
Medium
CVE-2023-40663
WP VR <= 8.3.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-40662
Cookies and Content Security Policy <= 2.15 - Sensitive Information Exposure
Medium
CVE-2023-40664
Donations Made Easy – Smart Donations <= 4.0.12 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-4160
WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting
Medium
2ec40d89-9caa-44dc-8577-00fa6463348c
Event Tickets with Ticket Scanner <= 1.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-4245
WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure
Medium
1289ead7-1af1-417d-aa47-7d07268f956c
Popup Box <= 3.7.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Critical
804
acymailing - Other
Medium
CVE-2023-40315
OpenNMS privilege escalation vulnerability
High
CVE-2023-36106
PowerJob incorrect access control vulnerability
High
CVE-2023-40313
OpenNMS vulnerable to remote code execution
Medium
CVE-2023-38905
Jeecg-boot SQL Injection vulnerability
High
CVE-2023-4395
Cockpit Cross-site Scripting vulnerability
Critical
CVE-2023-38894
tree-kit Prototype Pollution vulnerability
High
CVE-2023-25444
JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-28790
Simple Staff List <= 2.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-4040
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Missing Authorization to Arbitrary Order Status Modification
Medium
CVE-2023-40557
Tabs & Accordion <= 1.3.10 - Authenticated (Contributor+) Content Injection
Critical
CVE-2023-40609
Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQL Injection via 'post'
Medium
CVE-2023-40605
Typing Effect <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-27617
RSVPMarker <= 10.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.