Medium
CVE-2022-4623
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-2333
Ninja Forms Google Sheet Connector <= 1.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2023-2351
WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action
Medium
CVE-2023-2324
Elementor Forms Google Sheet Connector <= 1.0.6 - Reflected Cross-Site Scripting via 'code'
High
CVE-2023-3133
Tutor LMS <= 2.2.0 - Missing Authorization via REST API
Medium
CVE-2023-2320
CF7 Google Sheets Connector <= 5.0.1 - Reflected Cross-Site Scripting via 'code'
Medium
CVE-2023-3192
Froxlor Session Fixation vulnerability
Medium
CVE-2023-3191
Teampass Cross-site Scripting vulnerability
Medium
CVE-2023-3190
Teampass Cross-site Scripting vulnerability
High
CVE-2023-26132
dottie vulnerable to Prototype Pollution
High
CVE-2023-34232
Snowflake NodeJS Driver vulnerable to Command Injection
Medium
CVE-2023-34238
Gatsby develop server has Local File Inclusion vulnerability
High
CVE-2023-34245
@udecode/plate-link does not sanitize URLs to prevent use of the `javascript:` scheme
High
CVE-2023-34230
Snowflake Connector .Net Command Injection
High
CVE-2023-3172
Froxlor vulnerable to Path Traversal
Critical
CVE-2023-3173
Froxlor vulnerable to Improper Restriction of Excessive Authentication Attempts
High
CVE-2023-3080
WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject
High
CVE-2023-3122
GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email
High
CVE-2023-34233
Snowflake Python Connector vulnerable to Command Injection
Medium
CVE-2023-34234
OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
Low
CVE-2023-3163
RuoYi Uncontrolled Resource Consumption vulnerability
Medium
CVE-2023-34239
Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs
High
CVE-2023-3081
WP Mail Logging <= 1.11.1 - Unauthenticated Stored Cross-Site Scripting via Email
Medium
CVE-2023-0692
Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.