High
CVE-2022-2442
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2022-2376
Directorist <= 7.3.0 - Sensitive Information Disclosure
Medium
CVE-2022-2373
Simply Schedule Appointments <= 1.5.7.5 - Unauthenticated Sensitive Information Exposure
High
52daa230-1600-4ace-9adf-3f4e9be51e9f
Jupiter X Core <= 2.0.9 - Missing Authorization Checks
High
CVE-2022-2434
String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization
Medium
afc9114b-80b7-4caf-ab6b-35747ff5057b
Frontend File Manager & Sharing – User Private Files <= 1.1.0 - Sensitive Information Disclosure
Medium
ecde34f7-4624-4361-8d95-56fd4b08b476
Minimal Coming Soon – Coming Soon Page <= 2.33 - Authenticated (Admin+) Stored Cross-Site Scripting
High
96bc0d9b-1f03-48d4-aa99-954e92e77c04
Cyclone Slider <= 3.2.0 - Authenticated (Admin+) Arbitrary File Upload
High
5bf0267d-b84f-4ad2-8bb3-cc2aa4996af1
PostmagThemes Demo Import <= 1.0.6 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2022-2080
Sensei LMS <= 4.5.1 - Missing Authorization
High
CVE-2022-2657
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Multiple Unprotected AJAX Actions
High
CVE-2022-2261
WPIDE – File Manager & Code Editor <= 2.6 - Authenticated (Admininstrator+) Local File Inclusion
Medium
CVE-2022-2267
Mailchimp for WooCommerce <= 2.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2022-2556
Mailchimp for WooCommerce <= 2.7.1 - Authenticated (Admin+) Server-Side Request Forgery
Critical
CVE-2022-34149
WP OAuth Server <= 3.0.4 - Authentication Bypass
Medium
CVE-2022-2362
Download Manager <= 3.2.49 - IP Blocking Bypass
Medium
e012d7a0-46f9-4f3b-a178-2d06655fd441
External url as post Featured Image <= 2.02 - Reflected Cross-Site Scripting
High
CVE-2022-36284
Affiliate For WooCommerce premium <= 4.7.0 - Authenticated Insecure Direct Object Reference
High
CVE-2022-33201
MailerLite – Signup forms (official) <= 1.5.7 - Cross-Site Request Forgery
High
CVE-2022-2557
Team - WordPress Team Member Showcase Plugin <= 4.1.1 - Directory Traversal to Arbitrary File Read/Deletion
Medium
a8163dc0-e380-4a0b-bd18-34a3e80ca3dd
VR Calendar <= 2.4.4 - Authenticated (Administrator+) Local File Inclusion
Critical
CVE-2022-2551
Duplicator – WordPress Migration Plugin <= 1.4.7 - Unauthenticated Backup Download
High
CVE-2022-2552
Duplicator – WordPress Migration Plugin <= 1.4.7 - Sensitive Information Disclosure
Medium
CVE-2022-2377
Directorist – WordPress Business Directory Plugin with Classified Ads Listings <= 7.2.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.