Medium
CVE-2023-28532
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-27494
Streamlit publishes previously-patched Cross-site Scripting vulnerability
Medium
ghsa-2xpm-cmvw-3jcc
Reflected XSS in Application Logger module
Medium
CVE-2023-1429
Cross-site Scripting (XSS) in Document Types
Medium
ghsa-rrwm-8wqm-gwgv
Cross-site Scripting (XSS) - stored in Print Documents
High
CVE-2023-28104
DDOS attack on graphql endpoints
Medium
CVE-2023-28155
Server-Side Request Forgery in Request
Medium
CVE-2023-27095
Exposure of Sensitive Information in OpenGoofy Hippo4j
Medium
CVE-2023-1426
WP Tiles <= 1.1.2 - Authenticated(Subscriber+) Sensitive Information Exposure
Medium
CVE-2023-28416
Chankhe <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Activation
Medium
CVE-2023-28418
Mediciti Lite <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-1431
WP Simple Shopping Cart <= 4.6.3 - Information Disclosure
Medium
CVE-2023-28493
Newsmag <= 2.4.4 - Reflected Cross-Site Scripting
Medium
d6516fc0-4ef8-423b-9cdb-a275996fd98b
WP Basic Elements <= 5.2.15 - Missing Authorization to Plugin Settings Update via wpbe_save_settings
Medium
c3508b46-6920-48b9-9acb-620ea34e07e2
Branda – White Label WordPress <= 3.4.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b5639c00-f34c-45e3-8ff1-dfde7856a80e
WPML <= 4.6.1 - Cross-Site Scripting
Medium
CVE-2022-47164
Event Manager for WooCommerce <= 3.7.7 - Cross-Site Request Forgery leading to Uninstall Form Submission
Medium
CVE-2023-28420
Custom Options Plus <= 1.8.1 - Cross-Site Request Forgery via custom_options_plus_adm
Medium
CVE-2023-28494
Contact Form Email <= 1.3.31 - Missing Authorization to Feedback Submission
Medium
CVE-2023-23804
HT Feed <= 1.2.7 - Cross-Site Request Forgery leading to Limited Plugin Activation
Medium
CVE-2023-28496
SMTP2GO <= 1.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2023-28498
Hotel Booking Lite <= 4.6.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-28495
WP Shortcode by MyThemeShop <= 1.4.16 - Cross-Site Request Forgery
Medium
CVE-2022-46866
Import External Images <= 1.4 - Cross-Site Request Forgery via external_image_import_all_ajax
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.