Medium
CVE-2023-23811
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-2493
All In One Redirection <= 2.1.0 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-35918
WooCommerce Bulk Stock Management <= 2.2.33 - Cross-Site Scripting
Critical
CVE-2023-1597
tagDiv Cloud Library < 2.7 - Missing Authorization to Arbitrary User Metadata Update
Medium
CVE-2023-23795
Form Builder <= 1.9.9.0 - Cross-Site Request Forgery
Critical
CVE-2023-3277
MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
Medium
CVE-2023-35916
WooCommerce Payments <= 5.9.0 - Missing Authorization via redirect_pay_for_order_to_update_payment_method
High
CVE-2023-3219
EventON <= 2.1 - Insecure Direct Object Reference to Unauthorized Post Access
Medium
CVE-2023-35879
WooCommerce Product Vendors <= 2.1.78 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2023-3118
Export All URLs <= 4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-35876
WooCommerce Square <= 3.8.1 - Missing Authorization via multiple AJAX actions
Medium
CVE-2023-3308
Whaleal IceFrog is vulnerable to deserialization
Low
ghsa-68jh-rf6x-836f
@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces
High
CVE-2023-34448
Grav Server-side Template Injection (SSTI) via Twig Default Filters
High
CVE-2023-34253
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
High
CVE-2023-34252
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Critical
CVE-2023-34251
Grav Server Side Template Injection (SSTI) vulnerability
Critical
CVE-2023-34659
jeecg-boot SQL injection vulnerability
Medium
CVE-2023-34660
jeecg-boot unrestricted file upload vulnerability
High
CVE-2023-35782
ipandlanguageredirect extension vulnerable to SQL Injection
Medium
CVE-2023-35783
ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting
Unrated
785
HikaShop - SQL Injection
Medium
CVE-2023-35780
Galleria <= 1.0.3 - Cross-Site Request Forgery via showOptionsPage
High
CVE-2023-3295
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.