Medium
CVE-2022-0447
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24986
Post Grid <= 2.1.15 - Cross-Site Scripting
Medium
CVE-2021-24746
Sassy Social Share <= 3.3.39 - Reflected Cross-Site Scripting
Medium
CVE-2021-24987
Social Share, Social Login and Social Comments < 7.13.30 - Reflected Cross-Site Scripting
Medium
CVE-2021-25090
GridKit Portfolio <= 2.0.0 - Subscriber+ Stored Cross-Site Scripting
High
CVE-2021-25048
Page Builder KingComposer <= 2.9.6 - Authenticated Arbitrary Profile Creation and Stored Cross-Site Scripting
Medium
c793d7ad-987f-4b44-92aa-d0fdd66aa537
Members List Plugin <= 4.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-0837
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam
Medium
CVE-2021-25113
Dropdown Menu Widget <= 1.9.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-0537
MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution
Medium
CVE-2022-0958
Mark Posts <= 2.0.0 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0825
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure
High
CVE-2022-0403
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Medium
CVE-2022-0404
Material Design for Contact Form 7 <= 2.6.4 - Missing Authorization to Arbitrary Settings Update
Medium
954b8064-f317-4af4-a55f-9a61ee945006
WordPress Core < 5.9.2 & Gutenberg < 12.7.2 - Prototype Pollution via Block Editor
Medium
0ddb582a-e966-4c0b-a743-29d8943f846b
WordPress Core 5.9 - 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-20083
WordPress Core < 5.9.1 - jQuery Prototype Pollution
Medium
2ed1f200-5a27-4905-ac88-394b214bb430
WooCommerce < 6.3.1 - Unauthorized Order Status Change
High
CVE-2022-0709
Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure
Medium
CVE-2022-0884
Profile Builder <= 3.6.7 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-27855
Fatcat Apps Analytics Cat <= 1.0.9 - Cross-Site Request Forgery
Medium
CVE-2022-0431
Google Pagespeed Insights <= 4.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-0887
Easy Social Icons <= 3.1.3 - Admin+ SQL Injection
Critical
CVE-2021-25070
WP Block and Stop Bad Bots <= 6.88 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.