Critical
CVE-2020-36070
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-22728
Missing permission check of canView in GridFieldPrintButton
Medium
CVE-2023-22729
Open redirect vulnerability on CMSSecurity relogin screen
High
CVE-2023-30843
Hidden fields can be leaked on readable collections in Payload
High
ghsa-2fch-hv74-fgw9
Cross site scripting (XSS) in wwbn/avideo
Medium
CVE-2023-2307
@builder.io/qwik-city Cross-Site Request Forgery vulnerability
High
CVE-2023-29200
Path traversal vulnerability in the file manager
Medium
ghsa-wqm8-jx8r-8rcq
Cross-site scripting vulnerabilities in old version of bundled TinyMCE
Medium
CVE-2023-2122
Image Optimizer WD <= 1.0.26 - Reflected Cross-Site Scripting
Medium
CVE-2023-30875
Logo Scheduler <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2275
WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Note Addition via REST API
Medium
CVE-2023-1977
Booking Manager <= 2.0.28 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2023-31092
Easy Bet <= 1.0.7 - Authenticated(Contributor+) SQL Injection
Medium
CVE-2023-31095
Integration for Contact Form 7 HubSpot <= 1.2.8 - Open Redirect via state parameter
Medium
CVE-2023-2225
SEO ALert <= 1.5.9 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2123
WP Inventory Manager <= 2.1.0.12 - Reflected Cross-Site Scripting via 'message'
Medium
CVE-2022-4782
ClickFunnels <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-28690
WP BrowserUpdate <= 4.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-30609
HTML injection in search results via plaintext message highlighting
Medium
CVE-2023-30177
Cross Site Scripting in CraftCMS
Medium
CVE-2023-22665
Arbitrary javascript injection in Apache Jena
Medium
CVE-2023-27412
Mocho Blog <= 1.0.4 - Cross-Site Scripting
Critical
CVE-2023-2032
Custom 404 Pro <= 3.8.0 - Unauthenticated SQL Injection via 's'
High
CVE-2023-1347
Customizer Export/Import <= 0.9.5 - Authenticated (Administrator+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.