Medium
CVE-2022-1218
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
9c7edcbd-83b8-405b-892a-c404947990b3
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 4.4.0 - Cross-Site Scripting and SQL Injection
Medium
61aaeca4-6b5c-4b00-ab71-bba976d9e1b5
Lucky Wheel for WooCommerce – Spin a Sale <= 1.0.10 - Cross-Site Scripting
Medium
540d2495-7ad4-428c-b86e-9af73d0ebe51
Ad Invalid Click Protector (AICP) <= 1.2.5.2 - Reflected Cross-Site Scripting and Cross-Site Request Forgery
Medium
438bbd0f-5204-4a71-9730-efa51d864832
Faculty Staff and Student Directory Plugin – Campus Directory <= 1.7.4 - Authenticated Stored Cross-Site Scripting
Medium
350719b1-0e88-4f6f-979e-0ac3d17b852b
Shortcode for Current Date <= 2.1.4 - Stored Cross-Site Scripting
High
0315f5de-7a46-4e16-b080-557ddfd180a2
Moment.js <= 2.29.1 - Directory Traversal
High
02b61eb1-a93f-4437-87de-d698af8ef9f6
Blog2Social <= 6.9.3 - PHP Object Injection
Medium
CVE-2021-36851
Testimonials Slider <= 3.5.8.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2022-25618
wpDataTables – WordPress Tables & Table Charts Plugin <= 2.1.27 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-25613
FV Flowplayer Video Player <= 7.5.18.727 - Stored Cross-Site Scripting
Medium
CVE-2022-1094
amr users <= 4.59.3 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-4950
Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation
Medium
CVE-2022-0287
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Medium
6528041a-0217-43d5-bf29-9208e23aadd9
Weblizar Pin It Button On Image Hover And Post < 3.4 - Authorization Bypass
Medium
ee5e1262-193c-480b-bc27-481c961c7c47
Quick Adsense < 2.8.2 - Missing Authorization
Medium
CVE-2022-1557
ULeak Security & Monitoring Plugin <= 1.2.3 - Stored Cross-Site Scripting
Medium
CVE-2022-1187
WP YouTube Live <= 1.7.21 - Reflected Cross-Site Scripting
Medium
CVE-2022-27851
Use Any Font <= 6.1.7 - Cross-Site Request Forgery to API Key Deactivation
Critical
CVE-2021-46743
Firebase PHP-JWT < 6.0.0 - Algorithm Confusion
Medium
CVE-2022-28290
WordPress Country Selector <= 1.6.5 - Reflected Cross-Site Scripting via AJAX call of check_country_selector
Medium
CVE-2022-28221
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting
Medium
a3335613-1206-4555-8e48-748a336548d4
Animate It! < 2.4.0 - Cross-Site Scripting
Medium
CVE-2022-23183
Advanced Custom Fields <= 5.12 - Authenticated Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.