Critical
CVE-2022-3900
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2022-3915
Dokan <= 3.7.5 - Unauthenticated SQL Injection
Medium
CVE-2022-3880
Anti Hacker <= 4.19 - Missing Authorization to Arbitrary Plugin Install
High
CVE-2022-3930
Directorist <= 7.4.2.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Medium
624af5e1-dc40-4d33-bfac-1a409b81a096
SpeakOut! Email Petitions <= 4.0.3 - Reflected Cross-Site Scripting
High
CVE-2022-3861
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2022-3883
StopBadBots <= 7.23 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2022-3881
WP Tools <= 3.42 - Missing Authorization to Select Plugin Installation
Medium
CVE-2022-3879
Car Dealer <= 3.04 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2022-3882
Memory Usage <= 2.45 - Missing Authorization to Arbitrary Plugin Installation
High
CVE-2022-45077
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
High
fae1b795-8939-4229-8f89-fedf6f320ec1
All In One WP Security & Firewall <= 5.1.0 - Cross-Site Request Forgery
High
CVE-2022-3359
Shortcodes and extra features for Phlox theme <= 2.10.5 - PHP Objection Injection
Medium
CVE-2022-4022
SVG Support 2.5 - 2.5.1 - Insecure Plugin Defaults to Cross-Site Scripting
High
CVE-2022-3858
Floating Chat Widget - Chaty <= 3.0.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-44630
YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery
Medium
CVE-2022-45075
Activity Reactions For Buddypress <= 1.0.22 - Missing Authorization
High
b948574a-0aab-4596-83e6-04be21f78bc1
YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization
Medium
CVE-2022-45081
Add Multiple Marker <= 1.2 - Missing Authorization Checks to Settings Update
High
CVE-2022-45074
Activity Reactions For Buddypress <= 1.0.22 - Cross-Site Request Forgery
Medium
CVE-2022-3907
Clerk <= 3.8.2 - Authorization Bypass via Insufficient Validation
High
CVE-2022-44634
S2W – Import Shopify to WooCommerce <= 1.1.12 - Authenticated (Admin+) Local File Inclusion
High
CVE-2022-44739
Quick Restaurant Reservations <= 1.5.4 - Cross-Site Request Forgery
Medium
CVE-2022-40216
Better Messages <= 1.9.10.68 - Authorization Bypass to Blocking Control Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.