Medium
CVE-2023-30473
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2022-4118
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.2 - Unauthenticated SQL Injection
Medium
CVE-2023-0268
Mega Addons For WPBakery Page Builder <= 4.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-2114
NEX-Forms <= 8.3.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-0603
Sloth Logo Customizer <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2023-1408
Video List Manager <= 1.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-30747
WooCommerce Easy Duplicate Product <= 0.3.0.0 - Reflected Cross-Site Scripting via wedp_duplicated
Medium
CVE-2023-0536
Wp-D3 <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0537
Product Slider For WooCommerce Lite <= 1.1.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Meta Keys
Medium
CVE-2023-0544
WP Login Box <= 2.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-1596
tagDiv Composer < 4.0 - Reflected Cross-Site Scripting via ‘td_video_url’
Medium
CVE-2023-0522
Enable/Disable Auto Login when Register <= 1.1.0 Cross-Site Request Forgery
Medium
CVE-2023-30778
PowerPress <= 10.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-30487
LearnPress - Export/Import Courses <= 4.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-0514
Membership Database <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-29197
guzzlehttp/psr7 < 1.9.1 & 2.4.5 - Interpretation Conflict
Critical
CVE-2023-28787
Quiz and Survey Master <= 8.1.4 - Unauthenticated SQL Injection
Medium
2b2302d9-426c-415b-a7d3-3a9de95d87d1
WPML <= 4.6.0 - Reflected Cross-Site Scripting via wp_lang
High
CVE-2021-34337
An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password and then make arbitrar
Medium
CVE-2023-2102
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
Medium
CVE-2023-2105
alextselegidis/easyappointments Session Fixation vulnerability
Medium
CVE-2023-2104
alextselegidis/easyappointments Improper Access Control vulnerability
Medium
CVE-2023-2103
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
High
CVE-2023-30535
Snowflake JDBC vulnerable to command injection via SSO URL authentication
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.