Medium
CVE-2023-25399
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2023-36665
protobufjs Prototype Pollution vulnerability
Medium
CVE-2023-34150
Apache Any23 vulnerable to excessive memory usage
Medium
CVE-2023-33201
Bouncy Castle For Java LDAP injection vulnerability
Medium
CVE-2023-28773
Secondary Title <= 2.0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-37394
WP Dummy Content Generator <= 2.3.0 - Missing Authorization
Medium
CVE-2023-2173
BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion
Medium
CVE-2023-37386
Media Library Helper by Codexin <= 1.2.0 - Cross-Site Request Forgery via rate_the_plugin_action
Medium
CVE-2022-47169
Visibility Logic for Elementor <= 2.3.4 - Cross-Site Request Forgery via toggle_option
High
CVE-2022-46849
Coming Soon Page <= 1.5.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-37388
Simple Light Weight Social Share (Tweet, Like, Share and Linkedin) <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36690
WPLMS < 4.900 - Cross-Site Request Forgery
High
CVE-2023-3092
SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-29173
Product Category Tree <= 2.5 - Missing Authorization
High
CVE-2023-3088
WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email
Medium
CVE-2023-2171
BadgeOS <= 3.7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
72c04de6-78d2-4a45-834a-01ed879b528f
Visibility Logic for Elementor <= 2.3.4 - Missing Authorization via admin_post 'toggle_option'
Medium
CVE-2023-27621
Livestream Notice <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-29095
RSVPMaker <= 10.5.4 - Authenticated (Administrator+) SQL Injection via 'resend'
Critical
CVE-2023-37389
Booking Package <= 1.5.98 - Authorization Bypass to Arbitrary Password Reset
Medium
CVE-2023-2174
BadgeOS <= 3.7.1.6 - Missing Authorization in delete_badgeos_log_entries
Medium
CVE-2023-2172
BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite
Medium
CVE-2022-47172
WooLentor <= 2.6.2 - Cross-Site Request Forgery via process_data
High
CVE-2023-3168
WP Reroute Email <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.