High
CVE-2022-1006
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2022-0246
iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
High
CVE-2022-0989
NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality
High
CVE-2022-0680
Plezi < 1.0.3 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2022-0784
Title Experiments Free <= 9.0.0 - SQL Injection
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
High
36dec90a-fead-48f5-a88b-dfbc6d8bffb4
NotificationX <= 2.3.11 - SQL Injection
Medium
CVE-2022-0700
Simple Tracking <= 1.6 - Stored Cross-Site Scripting
Critical
CVE-2021-25003
WPCargo <= 6.8.9 - Unauthenticated Remote Code Execution
High
CVE-2021-24952
Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection
High
CVE-2021-44779
[GWA] AutoResponder <= 2.3 - Unauthenticated SQL Injection
High
0c06d868-ac71-401a-9b8e-ee04a099c095
Support Board <= 3.4.1 - Authenticated SQL Injection
Medium
CVE-2021-25110
Futurio Extra <= 1.6.2 - Sensitive Information Disclosure
High
CVE-2021-25109
Futurio Extra <= 1.6.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2021-25062
Orders Tracking for WooCommerce <= 1.0.14 - Reflected Cross-Site Scripting
High
CVE-2021-25078
Affiliates Manager <= 2.8.9 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2021-4450
Post Grid <= 2.1.12 - Contributor+ SQL Injection
High
3c476263-72b7-48f1-8ba3-91d69eae7b6a
WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress < 3.5.25 - Authenticated (Admin+) SQL Injection
Medium
1dc733ec-6cc8-40fc-b4c4-1fad4bcd9f21
Email Tracker – Email Tracking Plugin to track Emails for Open and Email Links Click (Compatible with WooCommerce) < 5.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-44777
Email Tracker <= 5.2.6 - Cross-Site Request Forgery
Medium
7759b209-4211-4ee5-ae7a-42645f5d5e96
Contest Gallery < 13.1.0.7 - Authenticated Email Address Disclosure
Critical
CVE-2021-4340
uListing <= 1.6.6 - Unauthenticated SQL Injection
High
CVE-2021-4330
Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2021-24812
BetterLinks – Shorten, Track and Manage any URL <= 1.2.5 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.