Medium
CVE-2022-4218
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2022-3679
Starter Templates by Kadence WP <= 1.2.16 - Authenticated (Admin+) PHP Object Injection
Low
CVE-2022-45833
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2022-44594
All in One Time Clok Lite <= 1.3.320 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-42699
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2022-45829
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Arbitrary File Deletion
High
CVE-2022-43453
WP Tools <= 3.41 - Missing Authorization leading to Authenticated (Subscriber+) Authorization Bypass
Medium
CVE-2022-4034
Appointment Hour Booking <= 1.3.72 - CSV Injection
High
CVE-2022-4035
Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form
High
CVE-2022-38900
decode-uri-component <= 0.2.1 - Denial of Service
Medium
CVE-2022-3961
Directorist <= 7.4.3 - Authenticated (Subscriber+) Sensitive Information Disclosure
High
CVE-2022-4106
Wholesale Market for WooCommerce <= 1.0.6 - Unauthenticated Arbitrary File Download
Medium
CVE-2022-4555
WP Shamsi <= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivation
Critical
CVE-2022-4063
InPost Gallery <= 2.1.4.1 - Local File Inclusion
Medium
CVE-2022-45842
WP ULike <= 4.6.4 - Race Condition
High
CVE-2022-45845
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2022-44589
miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes
High
CVE-2022-44581
Defender Security <= 3.3.2 - Sensitive Information Disclosure
High
CVE-2022-44737
All In One WP Security & Firewall <= 5.1.0 - Cross-Site Request Forgery
High
CVE-2022-3981
Icegram Express <= 5.4.19 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-4097
All-In-One Security (AIOS) – Security and Firewall <= 5.0.8 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-3919
Jetpack CRM <= 5.4.2 - Authenticated (Administrator+) Cross-Site Scripting
Medium
d592b81d-48c7-4b48-948d-f2b98719fdfc
Minimal Coming Soon – Coming Soon Page <= 2.33 - Authenticated (Administrator+) Cross-Site Scripting
High
CVE-2022-3912
User Registration <= 2.2.4 - Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.