Medium
CVE-2023-38518
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-38516
Audio Player with Playlist Ultimate <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-38391
Onepage Builder – Easiest Landing Page Builder For WordPress <= 2.4.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-38521
Exifography <= 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38482
Post Affiliate Pro <= 1.24.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32624
TS Webfonts for SAKURA <= 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-38478
Integration for WooCommerce and QuickBooks <= 1.2.3 - Open Redirect via setup_plugin
Medium
CVE-2023-38520
Pinpoint Booking System <= 2.9.9.3.4 - Content Spoofing
Medium
CVE-2023-38476
Client Portal : SuiteDash Direct Login <= 1.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32625
TS Webfonts for SAKURA <= 3.1.2 - Cross-Site Request Forgery
Medium
CVE-2023-36382
Media Library Categories <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-46841
Oxygen < 4.4 - Cross-Site Request Forgery
Medium
CVE-2023-28931
Post Connector <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38384
eaSYNC <= 1.3.11 - Reflected Cross-Site Scripting
Medium
CVE-2023-38397
Gestion-Pymes <= 1.5.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-37998
Disabler <= 3.0.3 - Cross-Site Request Forgery
Medium
CVE-2023-38383
Language <= 1.2.1 - Missing Authorization
Medium
CVE-2023-38387
Elastic Email Sender <= 1.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-32590
Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection
Medium
CVE-2023-38381
WP-FlyBox <= 6.46 - Cross-Site Request Forgery
High
CVE-2023-30200
Improper Limitation of a Pathname to a Restricted Directory in Advanced Plugins - Image: WebP, Compress, Zoom, Lazy load, Alt & More module for PrestaShop
High
CVE-2023-37897
grav Server-side Template Injection (SSTI) mitigation bypass
High
CVE-2023-33265
Hazelcast Executor Services don't check client permissions properly
Low
CVE-2023-3674
A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only e
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.