Medium
CVE-2023-32682
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-34104
fast-xml-parser vulnerable to Regex Injection via Doctype Entities
High
CVE-2023-34092
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
Medium
CVE-2023-2984
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
High
CVE-2023-7332
PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash
High
CVE-2023-54393
PocketMine-MP vulnerable to server crash with certain invalid JSON payloads in `LoginPacket` due to vulnerable dependency
Medium
CVE-2023-2983
Pimcore Privilege Defined With Unsafe Actions vulnerability
Medium
CVE-2023-33962
JStachio XSS vulnerability: Unescaped single quotes
High
CVE-2023-1895
Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery
Medium
CVE-2023-1910
Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint
Critical
CVE-2023-2986
Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass
Medium
64371d43-3acd-4863-80e4-deab071777b9
PowerPress <= 10.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Feed[title]'
Critical
CVE-2023-30150
Improper neutralization of SQL parameters in the Leo Custom Ajax (leocustomajax) module from LeoTheme for PrestaShop
Medium
CVE-2023-3109
Admidio vulnerable to Cross-site Scripting
Medium
CVE-2022-4115
Editorial Calendar <= 3.8.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via edcal_saveoptions AJAX action
Medium
CVE-2023-2326
Gravity Forms Google Sheet Connector <= 1.3.4 - Cross-Site Request Forgery via verify_code_integation_new
Medium
CVE-2023-0588
Catalyst Connect Zoho CRM Client Portal <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-2842
WP Inventory Manager <= 2.1.0.13 - Cross-Site Request Forgery via delete_item
Medium
CVE-2023-2605
WP Brutal AI < 2.0.1 - Reflected Cross-Site Scripting
Medium
c7ab5a00-ce1c-4d74-9192-c9834e2d702d
Visitor Traffic Real Time Statistics <= 6.7 - Missing Authorization to Information Disclosure
Medium
CVE-2023-2795
CodeColorer <= 0.10.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2624
KiviCare <= 3.2.0 - Reflected Cross-Site Scripting via 'filterType'
High
CVE-2023-2601
WP Brutal AI < 2.0.0 - Cross-Site Request Forgery to SQL Injection
Medium
CVE-2023-2743
WP ERP <= 1.12.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.