Medium
CVE-2022-40696
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2022-3415
Chat Bubble <= 2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
4394f96a-ceb5-463f-b454-a6fa4a59fc45
WordPress Core < 6.0.3 - Authenticated Information Disclosure via REST-API
Low
2f0d4f48-a315-4308-a5b6-7d3f045b292f
WordPress Core < 6.0.3 - Information Disclosure (Multi-Part Email Leak)
Low
0fcdfba2-aa19-4d0c-8880-5ee2c0680555
WordPress Core < 6.0.3 - Shared User Instance Weakness
Critical
CVE-2022-3536
Role Based Pricing for WooCommerce <= 1.6.2 - Missing Authorization to PHAR Deserialization
High
CVE-2022-41647
Optinly <= 1.0.18 - Missing Authorization to Plugin Settings Change
High
CVE-2022-3334
Easy WP SMTP <= 1.4.9 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3380
Customizer Export/Import <= 0.9.4 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3374
Ocean Extra <= 2.0.4 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3366
PublishPress Capabilities <= 2.5.1 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3357
Smart Slider 3 <= 3.5.1.9 - PHP Object Injection
Medium
CVE-2022-40130
WP-Polls <= 2.76.0 - Race Condition
Medium
475ca301-32f2-4913-925c-369a9a4c83c1
Table Generator <= 1.3.0 - Missing Authorization to Table Modification
Critical
CVE-2022-3360
LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection
Medium
CVE-2022-3391
Retain Live Chat <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
505edcf7-7015-453e-abd2-e2cd68a3a9f6
WP Super Cache <= 1.8 - Unauthenticated Cache Poisoning
Medium
CVE-2022-3247
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2022-3335
Kadence WooCommerce Email Designer <= 1.5.6 - PHP Object Injection
Medium
8ce4be1b-3807-4ded-80a5-30f2f80db89d
All In One WP Security & Firewall 5.0.0 - 5.0.7 - Protection Bypass via IP Spoofing
High
CVE-2021-36855
Booking Ultra Pro <= 1.1.6 - Cross-Site Request Forgery
Medium
f52f6d55-d0f5-4eba-bc07-ed94bded8777
Sabai Discuss <= 1.4.13 - Reflected Cross-Site Scripting
High
CVE-2022-34654
Manage Notification E-mails <= 1.8.2 - Cross-Site Request Forgery to Plugin Options Update
Medium
CVE-2022-41638
Pop-Up Chop Chop <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.