Medium
66b6443a-3bd0-4f45-8ad3-424d11ec24e1
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
cbdb3be2-50c5-4516-bce1-8785e338fe5c
Tidio – Live Chat, Chatbots & Email Integration <= 5.2.0 - Sensitive Information Disclosure
Medium
a2ad2c0d-542e-4b40-91a8-19b27297545e
Contact Form by WPForms <= 1.7.5.3 - Authenticated (Administrator+) Arbitrary File Access via Path Traversal
Medium
CVE-2022-2981
Download Monitor <= 4.5.97 - Authenticated (Administrator+) Arbitrary File Download
High
01aa00db-43e5-4c8a-a005-77a39ec89c94
MemberPress Downloads <= 1.2.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
52a03c45-1d65-43aa-b30f-13698019e05f
miniOrange's Google Authenticator <= 5.5.82 - Missing Authorization
Medium
CVE-2022-2554
Enable Media Replace <= 3.6.3 - Authenticated (Administrator+) Path Traversal
Medium
CVE-2022-2891
WP 2FA <= 2.2.1 - Time-Based TOTP attack to Sensitive Information Exposure
High
CVE-2022-3125
Frontend File Manager <= 21.2 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2022-31474
BackupBuddy 8.5.8.0 - 8.7.4.1 - Arbitrary File Download
Medium
CVE-2022-2352
Post SMTP <= 2.1.6 - Authenticated (Administrator+) Blind Server-Side Request Forgery
High
CVE-2022-2987
Ldap WP Login / Active Directory Integration <= 3.0.1 - Missing Authorization
Critical
CVE-2021-24890
Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
High
CVE-2022-3076
CM Download Manager <= 2.8.5 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2022-41840
Welcart e-Commerce 2.6.0-2.7.7 - Information Disclosure via Arbitrary File Read
Medium
4f1cf0f3-faf2-43f7-a641-95bfa5d73ca8
Infinite Scroll – Ajax Load More <= 5.5.4 - Authenticated (Admin+) Arbitrary File Read via Directory Traversal
Medium
af7adacf-7189-401f-b7c9-845eb328ca76
WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2022-2863
Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal
Medium
CVE-2022-2945
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal
Medium
CVE-2022-2943
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read
High
CVE-2022-33142
Better Messages <= 1.9.10.57 - Resource Exhaustion
High
CVE-2022-2912
Craw Data <= 1.0.0 - Server Side Request Forgery
Medium
CVE-2022-2887
WP Server Health Stats <= 1.6.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2633
All-in-One Video Gallery 2.5.8 - 2.6.0 - Arbitrary File Download & Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.