Medium
CVE-2022-4508
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2022-4698
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings
Medium
CVE-2022-4697
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4954
Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2023-3999
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization
Medium
CVE-2022-4487
Easy Accordion <= 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-46175
json5 <= 1.0.1 and 2.0.0-2.2.1 - Prototype Pollution
High
CVE-2022-4309
Subscribe2 <= 10.37 - Cross-Site Request Forgery
Critical
CVE-2022-4101
Images Optimize and Upload CF7 <= 2.1.4 - Missing Authorization to Arbitrary File Deletion
High
CVE-2022-4327
Anti-Malware Security and Brute-Force Firewall <= 4.21.85 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-4497
Jetpack CRM <= 5.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-3417
WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4320
connectDaily <= 1.4.4 - Reflected Cross-Site Scripting
Medium
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Medium
CVE-2022-3923
ActiveCampaign for WooCommerce <= 1.9.7 - Cross-Site Request Forgery
Medium
CVE-2022-47150
Appsero <= 1.2.0 - Cross-Site Request Forgery
Medium
CVE-2022-45083
ProfilePress <= 4.3.2 - Authenticated (Admin+) PHP Object Injection
High
CVE-2022-4043
WP Custom Admin Interface <= 7.28 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-45813
BeRocket Plugins <= (Various Versions) - Missing Authorization
High
dd02becd-77e5-46b9-acc9-dba6c5caba27
LWS Plugins <= (Various Versions) - Missing Authorization Checks
High
CVE-2022-3911
iubenda <= 3.3.2 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2022-46854
Launchpad <= 1.0.13 - Cross-Site Request Forgery
Medium
CVE-2022-4207
Image Hover Effects Ultimate 9.8.1 - 9.8.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4346
All-In-One Security <= 5.1.2 - Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.