Critical
CVE-2023-0224
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2023-23680
WP TopBar <= 5.36 - Cross Site Request Forgery
Medium
CVE-2023-22682
Camera slideshow <= 1.4.0.1 - Reflected Cross-Site Scripting
High
CVE-2022-4546
Mapwiz <= 1.0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2023-23721
Admin Log <= 1.50 - Cross-Site Request Forgery
High
CVE-2023-0405
GPT AI Power <= 1.4.37 - Missing Authorization
Medium
CVE-2023-23892
M Chart <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-22675
Fast Cache <= 1.5 - Cross-Site Request Forgery
High
4d6ea02d-df63-476c-b205-fa64ada18db5
WP Helper Premium <= 4.2.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2022-4628
Easy PayPal Buy Now Button <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23896
URL Shortener by MyThemeShop <= 1.0.16 - Missing Authorization
High
CVE-2023-22714
Coming Soon by Supsystic <= 1.7.10 - Cross Site Request Forgery
Medium
CVE-2023-22721
Oi Yandex.Maps for WordPress <= 3.2.7 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Unrated
drupal-contrib-2023-004
drupal/media_library_form_element - SA-CONTRIB-2023-004
Unrated
drupal-core-2023-001
Drupal core - SA-CORE-2023-001
Unrated
drupal-contrib-2023-003
drupal/media_library_block - SA-CONTRIB-2023-003
Unrated
drupal-contrib-2023-002
drupal/entity_browser - SA-CONTRIB-2023-002
Medium
CVE-2022-25901
cookiejar Regular Expression Denial of Service via Cookie.parse function
Medium
CVE-2018-25077
mel-spintax has Inefficient Regular Expression Complexity
High
CVE-2020-36651
Path Traversal in web-node-server
High
CVE-2021-32837
mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior to version 0.4.6. If a
High
CVE-2010-10006
Observable timing discrepancy in JOpenId
High
CVE-2023-21893
Component takeover in Oracle Data Provider for .NET
High
d589bada-3568-45ed-9f7c-fb14363a617a
MainWP (Various extensions) - Missing Authorization to Arbitrary Page/Post Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.