Medium
CVE-2023-25023
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2022-47603
Gallery – Image and Video Gallery with Thumbnails <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-0610
wallabag subject to Improper Authorization via annotations
Medium
CVE-2023-0609
wallabag contains Improper Authorization via export feature
Medium
CVE-2023-23937
Pimcore contains Unrestricted Upload of File with Dangerous Type
High
CVE-2023-25014
Broken Access Control in 3rd party TYPO3 extension "femanager"
High
CVE-2023-25013
Broken Access Control in 3rd party TYPO3 extension "femanager"
High
CVE-2023-23925
Switcher Client contains Regular Expression Denial of Service (ReDoS)
Critical
CVE-2023-25313
AVideo contains Command injection when embedding a video link
Medium
CVE-2022-45360
Commenter Emails <= 2.6.1 - Unauthenticated CSV Injection
Medium
CVE-2023-25028
CC Custom Taxonomy <= 1.0.1 - Authenticated (Administrator+) Cross Site Scripting
Medium
CVE-2023-22689
Auto Affiliate Links <= 6.3 - Cross-Site Request Forgery via aalDeleteLink function
Medium
CVE-2022-44743
Jobs for WordPress <= 2.5.10.2 - Authenticated (Author+) Cross Site Scripting
Medium
CVE-2022-45361
0mk Shortener <= 0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-45368
1003 Mortgage Application <= 1.75 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2022-47443
Multi Rating <= 5.0.5 - Cross Site Request Forgery
Medium
CVE-2023-25067
We’re Open! <= 1.45 - Cross-Site Request Forgery
Medium
CVE-2023-25062
Pinpoint Booking System <= 2.9.9.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-0334
ShortPixel Adaptive Images <= 3.6.1 - Reflected Cross-Site Scripting
High
CVE-2023-23879
PHP Execution <= 1.0.0 - Cross Site Request Forgery
Medium
CVE-2022-47607
Usersnap <= 4.16 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2023-0285
Real Media Library: Media Library Folder & File Manager <= 4.18.28 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-45350
Simple History <= 3.3.1 - Authenticated (Subscriber+) CSV Injection
Medium
CVE-2023-25061
Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.