Medium
CVE-2022-1663
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
52daa230-1600-4ace-9adf-3f4e9be51e9f
Jupiter X Core <= 2.0.9 - Missing Authorization Checks
Medium
337d052c-6ee2-4cd0-8a69-a4b66b25517a
Announcement & Notification Banner – Bulletin <= 3.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2022-2638
Export All URLs <= 4.3 - Arbitrary File Deletion
High
CVE-2022-2434
String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization
High
0ce2786e-2918-4dc0-99c4-db447216e140
Resize Image After Upload <= 1.8.5 - Cross-Site Request Forgery
Medium
CVE-2022-2538
WP Hide & Security Enhancer <= 1.7.9.2 - Reflected Cross-Site Scripting
Medium
88f447d5-990f-4d86-93a3-fd11b63af408
Custom Product Tabs Lite for WooCommerce <= 1.7.6 - Authenticated (Store Manager+) Stored Cross-Site Scripting
Critical
3dd08e56-0425-4711-87f1-39625f0ffae2
Mobile Assistant Connector <= 2.2.2 - SQL Injection
High
b49ae7fc-e860-4387-b596-12640ec7277f
WPCafe – Food Menu, WooCommerce Food Ordering, Food Delivery, Pickup and Restaurant Reservation <= 2.1.4 - Cross-Site Scripting
Medium
afc9114b-80b7-4caf-ab6b-35747ff5057b
Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure
Medium
a2c5e232-3561-43a1-bdfa-4a68f20b5889
Frontend File Manager & Sharing – User Private Files <= 1.1.1 - Missing Authorization
High
49e4dc41-dd5a-4689-9818-e742d1def2f0
WordPress HTTPS (SSL) <= 3.4.0 - Missing Authorization to Settings Change
Medium
fc329aee-e777-41eb-8799-539c891bd03b
Testimonial Slider <= 2.2.6 - Stored Cross-Site Scripting
Medium
f2e36b11-db93-4bac-a9bd-16d2e22efe4d
WP-MUI – Mass User Input – Add and Export WP Users Quickly <= 1.8 - Missing Authorization
Medium
ecde34f7-4624-4361-8d95-56fd4b08b476
Minimal Coming Soon – Coming Soon Page <= 2.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
dc37397e-cd23-4ffd-9771-316d7f9ff9fa
Twitter Bootstrap Slider <= 1.1.3 - Authenticated (Admin+) Cross-Site Scripting
Medium
cd93da2b-a64d-45a0-8d6c-e2a93ef20e13
WordPress to Hootsuite <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
Medium
c133c31e-e80a-4293-b19d-22e8bc8f677b
WordPress to Buffer <= 3.8.1 - Authenticated (Admin+) Cross-Site Scripting
High
96bc0d9b-1f03-48d4-aa99-954e92e77c04
Cyclone Slider <= 3.2.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
878671d2-572c-43f9-8fba-f2e2e955b7a6
Protect WP Admin <= 3.7 - Cross-Site Scripting
High
6635db72-8302-421d-9011-7eabb57c43a2
Contempo Real Estate Custom Posts <= 3.2.6 - Unauthorized File Upload
High
5bf0267d-b84f-4ad2-8bb3-cc2aa4996af1
PostmagThemes Demo Import <= 1.0.6 - Authenticated (Admin+) Arbitrary File Upload
Medium
2ae939f4-5a90-48ca-ae13-2ccbd6d8d08a
Simple Telegram <= 0.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.