Medium
CVE-2023-34011
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-3713
ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update
Medium
CVE-2023-37986
YourMembership Single Sign On <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-2433
YARPP – Yet Another Related Posts Plugin <= 5.30.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-32292
Chat Button <= 1.8.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-0604
WP Food Manager <= 1.0.3 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3671
MultiParcels Shipping For WooCommerce <= 1.15.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-36528
kk Star Ratings <= 5.4.3 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2023-3708
Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2023-3575
Quiz And Survey Master <= 8.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Question Title
Medium
CVE-2023-3524
WPCode <= 2.0.13 - Unauthenticated Reflected Cross-Site Scripting via Tag Filter Links
High
CVE-2023-3492
WP Shopping Pages <= 1.14 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-37985
Restaurant Menu and Food Ordering by Five Star Plugins <= 2.4.6 - Cross-Site Request Forgery via maybe_duplicate_item
Medium
CVE-2023-31221
PDQ CSV <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-3691
layui vulnerable to cross-site scripting
Medium
CVE-2023-3692
Admidio vulnerable to Unrestricted Upload of File with Dangerous Type
Medium
CVE-2023-36686
CartFlows Pro <= 1.11.11 - Reflected Cross-Site Scripting
Critical
CVE-2015-10122
WP Donate <= 1.4 - Unauthenticated SQL Injection in donate-display.php
Critical
CVE-2023-2507
CleverTap Cordova plugin vulnerable to Cross-site Scripting
High
CVE-2023-37473
zenstruck/collection passing callable string to EntityRepository::find() and query()
Critical
CVE-2023-37462
org.xwiki.platform:xwiki-platform-skin-ui Eval Injection vulnerability
High
CVE-2023-54392
PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket
High
CVE-2023-38325
cryptography mishandles SSH certificates
High
CVE-2023-37474
copyparty vulnerable to path traversal attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.