Medium
CVE-2022-45812
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-27629
Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attribute
High
CVE-2023-27634
Intrepidity <= 1.5.1 - Cross-Site Request Forgery via mytheme_add_admin
Medium
CVE-2023-0276
Weaver Xtreme Theme Support <= 6.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-1334
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'queue_posts'
Medium
CVE-2023-27423
Auto Prune Posts <= 1.8.0 - Cross-Site Request Forgery via admin_menu
Medium
CVE-2023-1335
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ucss_connect'
Medium
CVE-2023-1341
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'ajax_deactivate'
Medium
CVE-2023-1345
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'queue_posts'
Medium
ce060989-ce70-49ac-921c-a687bc944090
Mass Delete Taxonomies <= 3.0.0 - Cross-Site Request Forgery via mp_plugin_mass_delete_tags_init
Medium
CVE-2022-40211
GiveWP <= 2.25.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-1336
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ajax_deactivate'
Medium
CVE-2023-1346
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_page_cache'
Critical
aefbebce-9433-455d-b27c-93088b0c8494
LeadSnap <= 1.23 - Unauthenticated PHP Object Injection via AJAX
Medium
CVE-2023-27430
Mass Delete Unused Tags <= 2.0.0 - Cross-Site Request Forgery via plugin_mass_delete_unused_tags_init
Medium
CVE-2023-23672
GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion
Medium
CVE-2023-1337
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_uucss_logs'
Medium
CVE-2023-1342
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'ucss_connect'
Medium
CVE-2023-1340
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_uucss_logs'
Medium
CVE-2023-1333
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_page_cache'
Medium
CVE-2023-1344
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'uucss_update_rule'
Medium
CVE-2023-1338
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'attach_rule'
Medium
CVE-2023-1339
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'uucss_update_rule'
Medium
CVE-2023-1343
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'attach_rule'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.