Critical
CVE-2023-28667
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-0546
FluentForms <= 4.3.24 - Authenticated(Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-23884
Kanban Boards for WordPress <= 2.5.21 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2021-46877
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
High
CVE-2023-26113
Collection.js vulnerable to Prototype Pollution
Critical
CVE-2023-28115
PHAR deserialization allowing remote code execution
High
CVE-2023-28108
Improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
Medium
CVE-2023-28106
Cross-site Scripting (XSS) in UrlSlug Data type
Medium
CVE-2023-1463
Improper Authorization in nilsteampassnet/teampass
Critical
CVE-2023-1454
jeecg-boot SQL Injection vulnerability
High
CVE-2023-22710
Return and Warranty Management System for WooCommerce <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-28534
WP Job Portal <= 2.0.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-24408
Ecwid Shopping Cart <= 6.11.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-1172
Bookly <= 21.5 - Unauthenticated Stored Cross-Site Scripting via Name
Medium
CVE-2023-24405
Contact Form 7 – PayPal & Stripe Add-on <= 1.9.3 - Cross-Site Request Forgery
Medium
CVE-2023-1469
WP Express Checkout <= 2.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting via pec_coupon[code]
Medium
CVE-2022-44626
SEO Plugin by Squirrly SEO <= 12.1.20 - Missing Authorization
Medium
CVE-2023-1472
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery
High
CVE-2023-1471
WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-24376
WP Simple Events <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23894
Surbma | GDPR Proof Cookie Consent & Notice Bar <= 17.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-45065
SEO Plugin by Squirrly SEO <= 12.1.20 - Reflected Cross-Site Scripting via 'page' and 'tab'
Medium
CVE-2023-1470
eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-47431
Open RDW kenteken voertuiginformatie <= 2.0.14 - Reflected Cross-Site Scripting via open_data_rdw_kenteken
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.