Medium
CVE-2023-32575
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-2634
Get Your Number <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-32588
Post State Tags <= 2.0.6 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2023-32598
Featured Image Pro Post Grid <= 5.14 - Reflected Cross-Site Scripting via page
Medium
CVE-2023-24394
iframe popup <= 3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-23818
WP Register Profile With Shortcode <= 3.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-33333
Complianz - GDPR/CCPA Cookie Consent <= 6.4.4 - Cross-Site Request Forgery via run_sync
Medium
CVE-2023-32602
CALL ME NOW <= 3.0 - Cross-Site Request Forgery
High
CVE-2023-32059
Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
High
CVE-2023-32058
Vyper vulnerable to integer overflow in loop
High
CVE-2023-31146
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
Medium
ghsa-jjgp-whrp-gq8m
in-toto: PGP trust model not (fully) considered
Medium
CVE-2023-2630
Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations
High
CVE-2023-2629
Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection
Critical
CVE-2023-32070
Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
Critical
CVE-2023-32069
Privilege escalation (PR)/RCE from account through class sheet
Medium
CVE-2023-2616
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Medium
CVE-2023-32075
Pimcore vulnerable to Business Logic Errors via Customer automation rules
High
CVE-2023-30172
A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.
Medium
CVE-2023-32239
WoodMart <= 7.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2023-32242
Woodmart Core <= 1.0.36 - PHP Object Injection
Critical
CVE-2023-32243
Essential Addons for Elementor <= 5.7.1 - Unauthenticated Arbitrary Password Reset to Privilege Escalation
Medium
CVE-2023-32576
Locatoraid Store Locator <= 3.9.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-27426
NotifyVisitors <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.