CVE-2023-41131

Cross-Site Request Forgery CSRF vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.10 versions...

CVE-2023-41860

Unauth. Cross-Site Scripting XSS vulnerability in TravelMap plugin = 1.0.1 versions...

CVE-2023-32106

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Fahad Mahmood WP Docs plugin = 1.9.9 versions...

CVE-2023-32745

Cross-Site Request Forgery CSRF vulnerability in WooCommerce AutomateWoo plugin = 5.7.1 versions...

CVE-2023-27634

Cross-Site Request Forgery CSRF vulnerability allows arbitrary file upload in Shingo Intrepidity plugin = 1.5.1 versions...

CVE-2023-46640

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in D. Relton Medialist plugin = 1.3.9 versions...

CVE-2023-28750

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Ignazio Scimone Albo Pretorio On line plugin = 4.6 versions...

CVE-2023-28995

Cross-Site Request Forgery CSRF vulnerability in Keith Solomon Configurable Tag Cloud CTC plugin = 5.2 versions...

CVE-2023-37893

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Chop-Chop Coming Soon Chop Chop plugin = 2.2.4 versions...

CVE-2023-37210

A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spoofing attacks. This vulnerability affects Firefox 115...

CVE-2023-27621

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in MrDemonWolf Livestream Notice plugin = 1.2.0 versions...

CVE-2023-47541

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2.1 through 4.2.6, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions,...

CVE-2023-39173

In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access...

CVE-2023-37878

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-30723

Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health privilege...

CVE-2023-26093

Liima before 1.17.28 allows Hibernate query language HQL injection, related to colToSort in the deployment filter...

CVE-2023-34371

Cross-Site Request Forgery CSRF vulnerability in Didier Sampaolo SpamReferrerBlock plugin = 2.22 versions...

CVE-2023-5842

Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5...

CVE-2023-47834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master plugin = 8.1.13 versions...

CVE-2023-47781

Cross-Site Request Forgery CSRF vulnerability in Thrive Themes Thrive Theme Builder 3.24.2 versions...