Medium
CVE-2022-41656
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-3484
WPB Show Core <= 2.2 - Reflected Cross-Site Scripting
High
CVE-2022-41136
Shortcodes Ultimate <= 5.12.0 - Cross-Site Request Forgery
High
CVE-2022-40131
Page View Count <= 2.5.5 - Cross-Site Request Forgery
Medium
2ac1d65c-5e09-41ca-809b-2ab3ab5f62af
Shortcodes Ultimate <= 5.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2022-26375
AB Press Optimizer <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-41134
Optinly <= 1.0.15 - Cross-Site Request Forgery
Medium
CVE-2022-40697
3com – Asesor de Cookies <= 3.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-41623
ALD - AliExpress Dropshipping and Fulfillment for WooCommerce Premium <= 1.1.0 - Sensitive Information Disclosure
High
CVE-2022-41647
Optinly <= 1.0.18 - Missing Authorization to Plugin Settings Change
Medium
CVE-2022-41643
Accessibility <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-30545
5 Anker Connect <= 1.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-37601
loader-utils (JS package) < 2.0.3 - Prototype Pollution
Medium
7f447d25-1a38-48fe-8079-5ff425382046
eCommerce Product Catalog Plugin for WordPress <= 3.0.69 - Reflected Cross-Site Scripting
Medium
CVE-2022-40209
WordPress Importer: Import any XML File to WordPress <= 1.0.2 - Reflected Cross-Site Scripting
Low
CVE-2022-37599
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
Low
CVE-2022-37603
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
High
CVE-2022-3419
Automatic User Roles Switcher <= 1.1.1 - Missing Authorization to Privilege Escalation
High
CVE-2022-3334
Easy WP SMTP <= 1.4.9 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-3237
WP Contact Slider <= 2.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3441
Rock Convert <= 2.10.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-41620
SeoSamba for WordPress Webmasters <= 1.0.5 - Cross-Site Request Forgery
High
CVE-2022-3380
Customizer Export/Import <= 0.9.4 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3374
Ocean Extra <= 2.0.4 - Authenticated (Administrator+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.