Critical
CVE-2022-4120
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-4057
Autoptimize <= 3.0.4 - Sensitive Information Disclosure
Medium
CVE-2023-7286
ACF Quick Edit Fields <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
CVE-2022-4237
Welcart e-Commerce <= 2.8.5 - Authenticated (Subscriber+) Information Disclosure and PHAR deserialization
Medium
CVE-2022-4154
Contest Gallery Pro <= 19.1.4.1 - Authenticated (Administrator+) SQL Injection via wp_user_id
High
CVE-2022-4161
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_start
High
CVE-2022-4160
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_id
High
CVE-2022-4164
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_multiple_files_for_post
Medium
27205ad8-991f-4011-b1fd-759829acabd3
Essential Real Estate <= 3.9.6 - Reflected Cross-Site-Scripting
High
CVE-2022-4155
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via wp_user_id
High
CVE-2022-4157
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_option_id
High
CVE-2022-4156
Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id
Medium
CVE-2022-45079
Loginizer <= 1.7.5 - Cross-Site Request Forgery
High
CVE-2022-4158
Contest Gallery <= 19.1.4.1 - Unauthenticated SQL Injection via cg_Fields
Critical
CVE-2022-25912
simple-git < 3.15.0 - Remote Code Execution
High
CVE-2022-4268
Plugin Logic <= 1.0.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-4243
ImageInject <= 1.18 - Authenticated (Admin+) Stored XSS
Medium
CVE-2022-4213
Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn
Medium
CVE-2022-4219
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion
Medium
CVE-2022-4210
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf
Medium
CVE-2022-4216
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Facebook App ID
Medium
CVE-2022-4209
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf
Medium
CVE-2022-4215
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date
Medium
CVE-2022-4239
Workreap <= 2.6.3 - Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.