Medium
2ef5a8f1-ed3c-48bb-9554-b42e9e8d645d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-1186
Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure
Medium
CVE-2022-28222
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting
Critical
CVE-2022-1392
Videos sync PDF <= 1.7.4 - Unauthenticated Local File Inclusion
Medium
CVE-2022-1559
Clipr <= 1.2.3 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0363
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Critical
CVE-2022-0782
Donations <= 1.8 - Unauthenticated SQL Injection
Critical
CVE-2022-0541
FloLaunch <= 2.4 - Missing Authorization
Medium
CVE-2022-1092
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Medium
CVE-2022-0879
Caldera Forms <= 1.9.6 - Reflected Cross-Site Scripting via cf-api
Medium
CVE-2021-25094
Tatsu <= 3.3.12 - Unauthenticated Remote Code Execution
Medium
46258dc2-3e05-4050-baad-3b3ded912bfe
Shopping Cart & eCommerce Store <= 5.2.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-0706
Easy Digital Downloads <= 2.11.5 - Admin+ Cross-Site Scripting
Critical
3ed280ba-d7e5-4637-ab84-93dc82c009d8
Admin Word Count Column <= 2.2 - Arbitrary File Read
High
CVE-2022-1091
Safe SVG <= 1.9.9 - Content-Type Bypass
Medium
CVE-2022-25612
Simple Event Planner plugin <= 1.5.4 - Cross-Site Scripting
Medium
CVE-2022-25611
Simple Event Planner <= 1.5.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-0994
Hummingbird <= 3.3.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1560
Amministrazione Aperta <= 3.7.3 - Admin+ Local File Inclusion
Critical
CVE-2022-1020
Product Table for WooCommerce <= 3.1.2 - Missing Authorization
Medium
cda2465e-b17e-4b5c-ad86-3c3c7a354d03
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure
Medium
CVE-2022-0661
Ad Injection <= 1.2.0.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-0765
Loco Translate <= 2.6.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-1001
WP Downgrade <= 1.2.2 - Admin+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.