Medium
CVE-2023-1546
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-29435
Cryptocurrency All-in-One <= 3.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-29388
Product Catalog Simple <= 1.6.17 - Reflected Cross-Site Scripting
Critical
CVE-2023-29432
Houzez <= 2.8.2 - Unauthenticated SQL Injection
Medium
CVE-2023-29430
TheRoof <= 1.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-1928
WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_preload_single_callback'
Medium
CVE-2023-1927
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar'
Medium
CVE-2023-1923
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_ajax_request_callback'
Medium
CVE-2023-29431
qTranslate X Cleanup and WPML Import <= 3.0.1 - Missing Authorization via clean_ajx
Medium
CVE-2023-24421
PHP Compatibility Checker <= 1.5.2 - Cross-Site Request Forgery
Medium
CVE-2023-29436
IFrame Shortcode <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-29434
Optin Forms <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-27610
Transbank Webpay REST <= 1.6.6 - Authenticated (Administrator+) SQL Injection via orderby
Medium
CVE-2023-29100
The7 <= 11.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-1929
WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'
Medium
CVE-2023-1918
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_callback'
Medium
CVE-2023-1921
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_ajax_request_callback'
Medium
CVE-2023-24418
Tiny carousel horizontal slider plus <= 3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1925
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'
Medium
CVE-2023-1919
WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'
Medium
CVE-2023-29422
Dynamics 365 Integration <= 1.3.13 - Missing Authorization via init
Critical
CVE-2023-27033
Unrestricted Upload of File with Dangerous Type in Cdesigner module for PrestaShop
Medium
CVE-2023-0842
xml2js is vulnerable to prototype pollution
High
CVE-2023-1887
thorsten/phpmyfaq vulnerable to business logic errors
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.