High
CVE-2022-4268
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Critical
CVE-2022-45822
Advanced Booking Calendar <= 1.7.1 - Unauthenticated SQL Injection
Critical
CVE-2022-4117
IWS - Geo Form Fields <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2022-44594
All in One Time Clok Lite <= 1.3.320 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-4163
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate
High
CVE-2022-4151
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id
Medium
CVE-2022-3961
Directorist <= 7.4.3 - Authenticated (Subscriber+) Sensitive Information Disclosure
Critical
CVE-2022-4050
JoomSport <= 5.2.7 - Unauthenticated SQL Injection
Medium
CVE-2022-44735
WP Clictracker <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-44589
miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes
High
CVE-2022-3981
Icegram Express <= 5.4.19 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2022-3915
Dokan <= 3.7.5 - Unauthenticated SQL Injection
High
CVE-2022-3925
Buddybadges <= 1.0.0 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2022-3856
Comic Book Management System < 2.2.0 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-3858
Floating Chat Widget - Chaty <= 3.0.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-44630
YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery
High
b948574a-0aab-4596-83e6-04be21f78bc1
YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization
High
CVE-2022-3249
WP CSV Exporter <= 1.3.6 - Authenticated (Admin+) SQL Injection
High
CVE-2022-3764
Form Vibes <= 1.4.5 - Authenticated (Admininstrator+) SQL Injection
High
CVE-2022-3865
WP User Merger <= 1.5.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-41839
LoginPress | Custom Login Page Customizer <= 1.6.2 - Missing Authorization to Settings Changes
High
CVE-2022-3849
WP User Merger <= 1.5.2 - Authenticated (Admin+) SQL Injection
High
CVE-2022-3689
HTML Forms <= 1.3.24 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-3848
WP User Merger <= 1.5.2 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.