Critical
d7f024c5-80d8-490f-b448-9bccb877024b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2022-33960
Social Share Buttons by Supsystic <= 2.2.3 - Authenticated (Subscriber+) SQL Injection
High
1f9d8bbe-205f-44b6-a0c6-89b9135e6363
Contest Gallery – Files Upload and Contest Plugin for WordPress <= 17.0.4 - Admin+ SQL Injection
High
b1c27c27-f597-4867-a8d8-a83a3a1bf5f6
PPC Tracker WordPress <= 2.0 - Stored Cross-Site Scripting via IP
Medium
635e02a8-42f3-4098-aa3e-839099f40bfb
Restaurant Reservations <= 1.7 - SQL Injection
Critical
CVE-2022-1905
Events Made Easy <= 2.2.80 - SQL Injection
High
c906a988-ad45-49cc-9d77-6b501445ddc5
Gallery for Social Photo <= 1.0.0.25 - Subscriber+ SQL Injection
High
005234f9-8ae2-455a-8dcd-5d29a6051270
Image Slider <= 1.1.119 - Subscriber+ SQL Injection
High
642a6d42-100f-4461-b568-35e089287902
CRM WordPress Plugin – RepairBuddy <= 3.72 - SQL Injection
Medium
dacfba3e-c1d7-475c-885b-f77b77a65f91
Keyword Rank Tracker <= 1.0.7 - Stored Cross-Site Scripting
High
CVE-2022-1618
Coru LFMember <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-1436
WPCargo Track & Trace <= 6.9.4 - Reflected Cross-Site Scripting
High
5d762b22-5563-454f-8c1c-485a2a3a0d0f
Tracked Tweets <= 0.2.9 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-1435
WPCargo Track & Trace <= 6.9.4 - Admin+ Stored Cross Site Scripting
High
CVE-2022-1407
VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2021-25119
AGIL(Automatic Grid Image Listing) <= 1.0 - Arbitrary File Upload
High
d52d3291-838a-4b23-b969-8c6273faec1e
Product Filter For WooCommerce Product <= 1.3.1 - Unauthenticated SQL Injection
Medium
CVE-2021-25002
Tipsacarrier < 1.5.0.5 - Missing Authorization to Order Disclosure
Medium
7c32d967-85b9-4c93-a948-0126efb78f39
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Information Disclosure
Medium
CVE-2022-0398
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Subscriber+ Arbitrary Affiliate Links Creation
Medium
CVE-2022-0634
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery
Critical
e08d455e-925d-4a94-8d57-484aedc25411
Tipsacarrier < 1.5.0.5 - Unauthenticated SQL Injection
Medium
CVE-2021-25094
Tatsu <= 3.3.12 - Unauthenticated Remote Code Execution
Medium
cda2465e-b17e-4b5c-ad86-3c3c7a354d03
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.