High
CVE-2023-0279
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
c79fd08c-97bc-4d55-832e-92d0897bc3dc
Protected Posts Logout Button <= 1.4.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-25454
Protected Posts Logout Button <= 1.4.5 - Missing Authorization on pplb_options_save
Medium
CVE-2023-0538
Campaign URL Builder <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-25790
Woodmart <= 7.0.4 - Unauthenticated Arbitrary Content Injection
Medium
CVE-2023-23848
CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials
Low
CVE-2023-23847
CSRF vulnerability in Synopsys Jenkins Coverity Plugin
Medium
CVE-2023-23850
Synopsys Jenkins Coverity Plugin has Incorrect Default Permissions
Medium
ghsa-76r7-h46w-463r
Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug
Medium
CVE-2023-25763
Cross-site Scripting in Jenkins Email Extension Plugin
Medium
CVE-2023-25764
Cross-site Scripting in Jenkins Email Extension Plugin
Medium
CVE-2023-25761
Cross-site Scripting in Jenkins JUnit Plugin
Medium
CVE-2023-25762
Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
Medium
CVE-2023-25768
Missing Authorization in Jenkins Azure Credentials Plugin
Medium
CVE-2023-25766
Missing Authorization in Jenkins Azure Credentials Plugin
High
CVE-2023-25767
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
Critical
CVE-2023-25765
Sandbox escape in Jenkins Email Extension Plugin
High
CVE-2023-25578
Denial of service vulnerability when parsing multipart request body
High
CVE-2022-42735
Privilege escalation in Apache ShenYu
High
CVE-2023-24580
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f
High
CVE-2023-23706
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Cross-Site Request Forgery
Medium
CVE-2023-25461
Wp-Insert <= 2.5.0 Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-25703
Meta Slider and Carousel with Lightbox <= 1.6.2 - Cross-Site Request Forgery
Medium
CVE-2023-25781
Upload File Type Settings Plugin <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.