Medium
CVE-2022-1644
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2022-1692
CP Image Store with Slideshow <= 1.0.67 - Unauthenticated SQL Injection
High
CVE-2022-1691
Realty Workstation <= 1.0.9 - Authenticated SQL Injection
Medium
CVE-2022-0376
User Meta <= 2.4.2 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1583
External Links in New Window / New Tab <= 1.42 - Tabnabbing
Medium
CVE-2022-1387
No Future Posts <= 1.4 - Stored Cross-Site Scripting
Medium
CVE-2022-1294
IMDB Info Box <= 2.0 - Stored Cross-Site Scripting
High
CVE-2022-1683
amtyThumb <= 4.2.0 - Authenticated SQL Injection
Medium
CVE-2022-1643
Birthdays Widget <= 1.7.18 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2014-4845
BannerMan <= 0.2.4 - Authenticated (Admin+) Cross-Site Scripting
Medium
62a6fc85-db3c-4696-8102-d0247daae56c
StaffList <= 3.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-1589
Change WP Admin Login <= 1.0.9 - Missing Authorization Checks
High
CVE-2022-1684
CUBE SLIDER <= 1.2 - Authenticated (Admin+) SQL Injection
High
CVE-2022-1688
Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via ids Parameter
Medium
CVE-2022-1564
Form Maker <= 1.14.11 - Stored Cross-Site Scripting
High
CVE-2022-1687
Logo Slider <= 1.4.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-1299
Slideshow <= 2.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-1690
Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via id Parameter
Medium
CVE-2022-1582
External Links in New Window / New Tab <= 1.42 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-1685
Five Minute Webshop <= 1.3.2 - Authenticated (Admin+) SQL Injection via orderby
High
CVE-2022-1686
Five Minute Webshop <= 1.3.2 - Authenticated (Admin+) SQL Injection via id
Medium
CVE-2022-1568
Team Members <= 5.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-0642
JivoChat Live Chat – WP live chat plugin for WordPress <= 1.3.5.3 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-2072
Name Directory <= 1.25.2 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.