High
CVE-2022-2256
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2022-0594
Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic <= 9.7.5 - Information Disclosure
Medium
CVE-2022-30536
WP Maintenance <= 6.0.7 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2022-2133
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Authentication Bypass
Medium
bb929679-85bb-4d5b-9a99-e6081d55019f
miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting
Critical
CVE-2022-1609
The School Management Pro <= 9.9.6 - Remote Code Execution
Critical
CVE-2022-34858
OAuth 2.0 client for SSO <= 1.11.3 - Authentication Bypass
Critical
a10ba041-ded4-41d4-93ba-7fa7389acd54
WordPress OpenID Connect Client <= 2.1.7 - Authentication Bypass
Critical
5d07d5e9-be7c-4c16-b931-d909ed8be361
Login with WHMCS <= 1.11.3 - Authentication Bypass
Critical
7c3ae610-44ef-4354-b085-00c00a486dc9
Login with Cognito <= 1.4.6 - Authentication Bypass
Medium
a8a3ba35-3cc0-4a6b-bb96-6ae5a83e5ad6
MainWP Dashboard <= 4.2.4.1 - Cross-Site Request Forgery
Medium
d3004699-3285-426a-8a85-33be6c0c0b6f
Print My Blog – Print, PDF, & eBook Converter <= 3.15.8 - Unprotected AJAX Actions
High
CVE-2022-1576
WP Maintenance Mode & Coming Soon <= 2.4.4 - Cross-Site Request Forgery
High
b536028d-4e11-4bda-8097-b37857a28309
Thumbnail For Excerpts <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2022-2117
GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure
High
69ec31f3-8ec8-40ad-ba7f-77f9132ad51f
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 - Server-Side Request Forgery
High
CVE-2022-1938
Awin Data Feed <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-1937
Awin Data Feed <= 1.7 - Reflected Cross-Site Scripting
Medium
CVE-2022-2108
Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
Medium
fe4171b9-b17e-4e6e-9ab4-4b1b125e8950
Lana Email Tester <= 1.0.0 - Missing Authorization to Mail Relay & Cross-Site Request Forgery
Critical
df46b3d5-a433-47b5-99b8-117591f7dd16
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.10 - Code Injection
Critical
d7f024c5-80d8-490f-b448-9bccb877024b
Premium Courses & eLearning <= 1.0.5 - SQL Injection
Medium
86f3c549-2cdd-4294-bc62-0892e94ddbb7
Qubely <= 1.7.9 - Incorrect Authorization
Medium
CVE-2021-25056
Ninja Forms Contact Form <= 3.6.9 - Cross-Site Scripting via field label
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.