High
CVE-2022-2083
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
f5867f37-ae58-4f75-828e-bb99b3e5252e
Currency Switcher for WordPress <= 1.0.3 - Reflected Cross-Site Scripting
Low
CVE-2022-1327
Image Gallery – Grid Gallery <= 1.1.1 - Stored Cross-Site Scripting
Medium
CVE-2022-1904
Easy Pricing Tables <= 3.2.0 - Reflected Cross-Site Scripting
Medium
ff6e6101-8ba5-4cc7-9b02-67a0d9a978b6
Browser and Operating System Finder <= 1.2 - Missing Authorization
Medium
CVE-2022-1951
core plugin for kitestudio themes <= 2.2.1 - Reflected Cross-Site Scripting
Medium
dcd986cd-d6c0-4d8f-8078-ac0ac83572a3
My Content Management <= 1.7.1 - Cross-Site Scripting
Medium
d8c0cd48-b27c-4bc1-9e5f-d918448290fb
Trade Runner <= 3.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1470
Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site Scripting
Critical
CVE-2022-1574
HTML2WP <= 1.0.0 - Arbitrary File Upload
Medium
95bae3f2-313b-4b6c-a81c-8af6f169151b
Woody code snippets <= 2.4.5 - Reflected Cross-Site Scripting
Medium
7f9b86a3-c68a-443f-a2f3-5f31f3280a6f
ShortPixel Image Optimizer <= 4.22.9 - Reflected Cross-Site Scripting
Medium
CVE-2022-1985
Download Manager <= 3.2.42 - Reflected Cross-Site Scripting
High
CVE-2022-1572
HTML2WP <= 1.0.0 - Arbitrary File Deletion
Medium
6c06b79a-0803-4973-ba88-b97d7145f82b
Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-1977
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery
High
CVE-2022-1573
HTML2WP <= 1.0.0 - Cross-Site Request Forgery
Medium
f708e910-7745-4ff5-9f9f-5552dbaf1113
Elementor Contact Form DB <= 1.5 - Sensitive Information Disclosure
High
CVE-2022-1653
Social Share Buttons by Supsystic <= 2.2.3 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2022-1625
New User Approve <= 2.4 - Cross-Site Request Forgery
Medium
CVE-2022-1953
Product Configurator for WooCommerce <= 1.2.31 - Arbitrary File Deletion
Medium
CVE-2022-1916
Active Products Tables for WooCommerce <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-1964
Easy SVG Support <= 3.2.0 - Cross-Site Scripting via SVG Upload
Medium
CVE-2022-30533
Modern Events Calendar Lite <= 6.2.9 - Authenticated (Contributor+) Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.