Medium
CVE-2020-20697
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-35915
WooCommerce Payments <= 5.9.0 - Authenticated (Shop manager+) SQL Injection via currency parameters
Critical
CVE-2023-2834
BookIt <= 2.3.7 - Authentication Bypass
Medium
CVE-2023-30500
Contact Form by WPForms (Free and Premium) <= 1.8.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-31080
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.65 - Missing Authorization
Medium
CVE-2023-35912
Potent Donations for WooCommerce <= 1.1.9 - Cross-Site Request Forgery in hm_wcdon_admin_page
Medium
CVE-2023-23679
JS Help Desk – Best Help Desk & Support Plugin <= 2.7.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2023-31213
WPBakery Page Builder for WordPress <= 6.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-23678
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 2.2.5 - Authenticated(Administrator+) CSV Injection
High
CVE-2023-3135
Mailtree Log Mail <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-35917
WooCommerce PayPal Payments <= 2.0.4 - Cross-Site Request Forgery
Medium
CVE-2023-35050
Elementor Pro <= 3.13.0 - Missing Authorization
Critical
CVE-2023-30151
Improper neutralization of SQL parameters in the Boxtal (envoimoinscher) module from Boxtal for PrestaShop
Medium
CVE-2023-35165
AWS CDK EKS overly permissive trust policies
Medium
CVE-2023-3315
Jenkins Team Concert Plugin does not perform permission checks in methods implementing form validation
Medium
CVE-2023-34459
OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
High
CVE-2023-35005
In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations.
Medium
CVE-2023-34603
JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo
Medium
CVE-2023-34602
JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode
Critical
CVE-2023-35839
Solon vulnerable to deserialization of untrusted data
Medium
CVE-2023-3129
URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress <= 1.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-2578
Buy Me a Coffee – Button and Widget Plugin <= 3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2026
Image Protector <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2796
EventON <= 2.1 - Missing Authorization to Event Access
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.