Medium
CVE-2022-4119
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2022-4324
Custom Field Template <= 2.5.7 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3860
Visual Email Designer for WooCommerce <= 1.7.1 - Authenticated (Author+) SQL Injection
High
CVE-2022-4302
White Label CMS <= 2.4 - Authenticated (Administrator+) PHP Object Injection
Medium
90c0e937-19fd-484e-a50f-42b00a6eeb30
Moosend Website Connector <= 1.0.189 - Missing Authorization
Critical
CVE-2022-3241
Build App Online <= 1.0.18 - Unauthenticated SQL Injection
High
CVE-2022-41650
Custom Content by Country <= 3.1.2 - Cross-Site Request Forgery
Critical
CVE-2022-4120
Stop Spammers Security <= 2022.5 - Unauthenticated PHP Object Injection
Medium
CVE-2022-4237
Welcart e-Commerce <= 2.8.5 - Authenticated (Subscriber+) Information Disclosure and PHAR deserialization
Medium
CVE-2022-4213
Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn
Medium
CVE-2022-4219
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion
Medium
CVE-2022-4210
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf
Medium
CVE-2022-4216
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Facebook App ID
Medium
CVE-2022-4209
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf
Medium
CVE-2022-4215
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date
High
CVE-2022-45807
WP Mail Log <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2022-4212
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf
Medium
CVE-2022-4220
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion
Medium
CVE-2022-4217
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key
Medium
CVE-2022-4214
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip
Medium
CVE-2022-4267
Bulk Delete Users by Email <= 1.2 - Reflected Cross-Site Scripting
High
CVE-2022-4266
Bulk Delete Users by Email <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2022-4211
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf
Medium
CVE-2022-4208
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.