High
CVE-2022-47430
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-23646
Album Gallery – WordPress Gallery <= 1.4.9 - Cross-Site Request Forgery via album-gallery-column-settings.php
Medium
CVE-2022-38716
Motors – Car Dealer & Classified Ads <= 1.4.5 - Cross-Site Request Forgery via Multiple Functions
Medium
0b4a0dff-1054-4f50-8ff5-e3cc2b45d77b
Image Optimizer by 10web <= 1.0.25 - Directory Traversal to Information Exposure
Medium
CVE-2023-22690
Ebook Store < 5.78 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47436
Yatra <= 2.1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-26325
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-45815
GDPR Compliance & Cookie Consent <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-30543
`chainId` may be outdated if user changes chains as part of connection in @web3-react
High
ghsa-xv3q-jrmm-4fxv
Authentication Bypass in @strapi/plugin-users-permissions
Medium
CVE-2023-30536
Insecure header validation in slim/psr7
Low
CVE-2023-26049
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
Medium
CVE-2023-30608
sqlparse contains a regular expression that is vulnerable to Regular Expression Denial of Service
Medium
CVE-2023-2160
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.
High
CVE-2023-2017
Shopware Has Improper Control of Generation of Code in Twig rendered views
Critical
CVE-2023-2138
@nuxtlabs/github-module made Use of Hard-coded Credentials
Medium
CVE-2023-2083
Essential Blocks <= 4.0.6 - Missing Authorization via save
Medium
CVE-2023-30784
Kaya QR Code Generator <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via qrCode attribute
Medium
CVE-2023-1891
Helpie FAQ <= 1.9.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-2170
TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2022-43490
Stream <= 3.9.2 - Cross-Site Request Forgery
Medium
CVE-2023-28414
ApexChat <= 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-7295
Video Grid <= 1.21 - Reflected Cross-Site Scripting
Medium
CVE-2023-2087
Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.