High
CVE-2022-2433
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-2912
Craw Data <= 1.0.0 - Server Side Request Forgery
Medium
4f997c20-38f6-4968-b7de-8f28f825c7fd
Social Media Share Buttons <= 3.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2351
Post SMTP Mailer/Email Log <= 2.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
c5203a17-cc4f-4545-a231-dfbfb900f0fd
BuddyPress xProfile Checkout Manager for WooCommerce <= 1.3.5 - Stored Cross-Site Scripting
Medium
CVE-2022-2887
WP Server Health Stats <= 1.6.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
5fd000dd-f75a-4ff0-bc71-20db878caca7
OneTone Companion <= 1.1.1 - Open Mailer
Low
CVE-2022-1194
Mobile Events Manager <= 1.4.7 - Authenticated (Administrator+) CSV Injection
High
CVE-2022-2633
All-in-One Video Gallery 2.5.8 - 2.6.0 - Arbitrary File Download & Server-Side Request Forgery
Medium
CVE-2022-2710
Scroll To Top <= 1.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
48758ada-4c7f-4a7f-8b43-535f820e6b3c
Accordion <= 2.2.43 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-2436
Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization
Medium
CVE-2022-2877
Titan Anti Spam & Security <= 7.3.0 - IP Spoofing to Protection Bypass
Medium
CVE-2022-2737
WP STAGING – Backup Duplicator & Migration <= 2.9.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
12b4d9e6-761f-4857-a701-7d22d4ee0288
Make, formerly Integromat Connector <= 1.5.1 - Missing Authorization to Arbitrary Options Update
Medium
0c80cbad-39ea-4f75-a025-6b9667560845
Float to Top Button <= 2.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
08c957fb-05e8-489e-846e-1afb0ca6750f
Gallery PhotoBlocks <= 1.2.8 - Missing Authorization Checks
Medium
ecbb40a5-3e33-4084-a19b-daf014ce68c8
Affiliates Manager <= 2.9.13 - Reflected Cross-Site Scripting
High
ddd37b7a-3ef8-4269-ba3b-665ae34bde26
Affiliates Manager <= 2.9.13 - Cross-Site Request Forgery
Critical
CVE-2022-2798
Affiliates Manager <= 2.9.13 - CSV Injection
Medium
CVE-2022-2913
Login No Captcha reCAPTCHA <= 1.6.11 - CAPTCHA Bypass via Whitelisted IP Address Spoofing
Medium
CVE-2022-2799
Affiliates Manager <= 2.9.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b85e9bf4-0006-402a-ae46-a02fa854d995
Corner Ad <= 1.0.53 - Reflected Cross-Site Scripting
Medium
7047d53e-c9e4-46f9-8b5f-3489a1fb7e97
Database Management tool – Adminer <= 1.1.5 - Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.