Medium
e012d7a0-46f9-4f3b-a178-2d06655fd441
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-2198
WPQA - Builder forms Addon For WordPress < 5.7 - Information Disclosure
High
CVE-2022-2276
WP Edit Menu < 1.5.0 - Missing Authorization to Post Deletion
High
dc2532b4-907f-438b-baab-c3966cf30f74
Student Result or Employee Database <= 1.7.9 - Missing Authorization
Medium
d36d97fb-2fce-4248-8955-7d66919487e3
Automatic pages for Privacy Policy, Terms, About, Contact us <= 1.41 - Reflected Cross-Site Scripting
Medium
d1f86c9d-38dc-4d5d-af37-9443348fe1e8
Redirect By Cookie <= 1.06 - Reflected Cross-Site Scripting
High
CVE-2022-2407
WP phpMyAdmin <= 5.2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
cce4a7cc-d93c-4d0e-ba63-b73bee0ea181
Find Slow Functions & Actions & Filters & Hooks <= 1.40 - Reflected Cross-Site Scripting
Medium
CVE-2022-25649
Affiliate For WooCommerce <= 4.7.0 - Missing Authorization
Medium
bfb329da-00df-4178-ad40-9b0b718dc30e
Add Custom Post Type into Post Query <= 1.03 - Reflected Cross-Site Scripting
High
CVE-2022-2593
Better Search Replace <= 1.4 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-34154
Enable SVG, WebP & ICO Upload <= 1.1.0 - Arbitrary File Upload
High
CVE-2022-36284
Affiliate For WooCommerce premium <= 4.7.0 - Authenticated Insecure Direct Object Reference
Medium
a646ebe5-3445-4e9b-99a9-23761d4fba9c
Comment Fields <= 1.03 - Reflected Cross-Site Scripting
Medium
CVE-2022-2375
WP Sticky Button <= 1.4 - Missing Authorization to Arbitrary Settings Update
Low
CVE-2022-36343
Enable SVG, WebP & ICO Upload <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-2392
Lana Downloads Manager <= 1.7.1 - Authenticated (Contributor+) Arbitrary File Download
Medium
988c1968-ef92-4d3d-bbd5-88e73512ebb4
Require & Limit Categories, Tags, Featured Image and taxonomies <= 1.26 - Reflected Cross-Site Scripting
Medium
986957ab-7394-457e-9a6f-f6b96b56cd15
Breadcrumbs Shortcode <= 1.44 - Reflected Cross-Site Scripting
Medium
91e5c89e-85d3-4dda-8b79-e0b4d64e29f0
All custom fields & groups <= 1.04 - Reflected Cross-Site Scripting
High
CVE-2022-3142
NEX-Forms <= 7.9.6 - Authenticated (Administrator+) SQL Injection
Medium
87b8386e-863e-4a33-8beb-aab3e704ecb6
Built-in Widgets Query extend <= 1.05 - Reflected Cross-Site Scripting
High
CVE-2022-2558
Simple Job Board <= 2.9.6 - Information Disclosure
Medium
CVE-2022-2312
Student Result or Employee Database <= 1.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.