Medium
CVE-2022-38057
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-36839
Social Media Follow Buttons Bar <= 4.73 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-34654
Manage Notification E-mails <= 1.8.2 - Cross-Site Request Forgery to Plugin Options Update
Medium
CVE-2022-41638
Pop-Up Chop Chop <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-35730
Oceanwp sticky header <= 1.0.8 - Cross-Site Request Forgery to Plugin Settings Update
Medium
24349a73-d543-433b-9f7c-b12f914fc80f
Forym <= 1.5.8 - Reflected Cross-Site Scripting
Medium
CVE-2022-40205
wpForo Forum <= 2.0.5 - Insecure Direct Object Reference to Forum Status Change
Medium
CVE-2022-4381
Popup Maker <= 1.16.8 - Authenticated (Contributor+) Cross-Site Scripting
Medium
eb0b9c2b-c536-4697-be4c-7557ba66c2c4
WPML <= 4.5.10 - Unprotected AJAX Actions
Medium
CVE-2022-41155
iQ Block Country <= 1.2.18 - Country Blocking Bypass
Medium
CVE-2022-2574
Meks Easy Social Share <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
8f7b0a1c-16d7-45db-b419-569ed5c4a5e4
Make, formerly Integromat Connector <= 1.5.2 - Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2022-3282
Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.6.4 - File Upload Size Limit Bypass
Medium
CVE-2022-2563
Tutor LMS <= 2.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-2834
Helpful <= 4.5.25 - Sensitive Information Disclosure
High
CVE-2022-27858
Activity Log <= 2.8.3 - CSV Injection
High
CVE-2022-32587
WP Page Widget <= 3.9 - Cross-Site Request Forgery
High
CVE-2022-3126
Frontend File Manager Plugin <= 21.2 - Cross-Site Request Forgery to File Upload
Medium
CVE-2021-36830
Comment Guestbook <= 0.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-40132
Seriously Simple Podcasting <= 2.16.0 - Cross-Site Request Forgery
Medium
da0950ad-4d6c-46fe-83c9-c14653fe9f1f
Backup Scheduler <= 1.5.13 - Missing Authorization to Sensitive Information Disclosure
High
CVE-2022-38079
Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery
Medium
CVE-2022-4362
Popup Maker <= 1.16.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-38454
Kraken.io Image Optimizer <= 2.6.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.