Medium
45f3568c-b6d9-4d00-a8cd-571443d80fd3
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-2219
Unyson <= 2.7.26 - Cross-Site Scripting
Medium
CVE-2022-30536
WP Maintenance <= 6.0.7 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-28666
Custom Product Tabs for WooCommerce <= 1.7.7 - Subscriber+ Settings Update
High
CVE-2022-2240
Request a Quote <= 2.3.8 - CSV Injection
High
d0a81d60-d489-4786-aa21-805a1e2aa198
Ad Inserter Pro <= 2.7.15 - Arbitrary File Modification
Critical
CVE-2022-36386
WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution
Medium
CVE-2022-1551
SP Project & Document Manager <= 4.57 - Sensitive File Disclosure
Medium
6c6e9884-0b60-4ea8-b042-55cf0fb6a6d0
Dropdown Menu Widget <= 1.9.7 - Reflected Cross-Site Scripting
Medium
63e167ef-9f03-45a8-b3dc-240ccf1ea6c3
Photo Gallery by 10Web <= 1.6.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-2071
Name Directory <= 1.25.3 - Cross-Site Request Forgery
Medium
CVE-2022-2239
Request a Quote <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-2133
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Authentication Bypass
High
CVE-2022-2144
Jquery Validation For Contact Form 7 <= 5.2 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2022-2168
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
High
CVE-2022-1672
Insights from Google PageSpeed <= 4.0.6 - Multiple Cross-Site Request Forgery
Medium
bb929679-85bb-4d5b-9a99-e6081d55019f
miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2022-2173
Advanced Database Cleaner <= 3.1.0 - Reflected Cross-Site Scripting
High
83f6bdda-e489-4e85-b510-7bfaa2329609
Page Generator <= 1.6.5 - Cross-Site Request Forgery to Arbitrary Keywords Deletion/Duplication
Medium
CVE-2022-2194
Accept Stripe Payments <= 2.0.63 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2022-1609
The School Management Pro <= 9.9.6 - Remote Code Execution
Medium
CVE-2022-2340
W-DALIL <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2100
Page Generator <= 1.6.4 - Cross-Site Scripting
Medium
CVE-2022-2090
Discount Rules for WooCommerce <= 2.4.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.