Critical
ghsa-hj8m-9fhf-v7jp
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-33141
YARP Denial of Service Vulnerability
High
CVE-2023-3302
Admidio Improper Neutralization of Formula Elements in a CSV File vulnerability
Medium
CVE-2023-3304
Admidio Improper Access Control vulnerability
Low
CVE-2023-3303
Admidio Improper Access Control vulnerability
High
CVE-2023-30260
RaspAP raspap-webgui Command Injection vulnerability
High
CVE-2023-31469
Apache StreamPipes Improper Privilege Management vulnerability
Medium
de00d13b-fab9-4284-9594-abd000fbb7ef
WP Mail Logging <= 1.11.2 - Missing Authorization to Notice Dismissal
High
CVE-2023-36385
PostX – Gutenberg Blocks for Post Grid <= 2.9.9 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-36502
Balkon <= 1.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-3182
Restrict Content <= 3.2.2 - Reflected Cross-Site Scripting
High
CVE-2023-36508
Contact Form to DB by BestWebSoft <= 1.7.1 - Authenticated (Administrator+) SQL Injection via 's'
Medium
CVE-2023-36503
MaxButtons <= 9.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-3132
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
Medium
CVE-2023-3387
Lana Text to Image <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-2579
InventoryPress <= 1.7 - Authenticated(Author+) Stored Cross-Site Scripting
Medium
CVE-2023-36504
BBS e-Popup <= 2.4.5 - Missing Authorization
Medium
79bb311d-d10d-4e4e-b690-84c0051b9911
Restrict Content <= 3.2.2 - Missing Authorization to Notice Dismissal
Medium
CVE-2023-2143
Enable SVG, WebP & ICO Upload <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2023-34017
Five Star Restaurant Reservations <= 2.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-3372
Lana Shortcodes <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-3197
MStore API <= 4.0.1 - Unauthenticated SQL Injection
High
CVE-2023-3186
Popup by Supsystic <= 1.10.18 - Prototype Pollution
Medium
041e635a-9f97-4f54-8ecb-57bbbc321cfc
ProfilePress <= 4.10.3 - Reflected Cross-Site Scripting via error message
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.