Medium
CVE-2022-1945
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2022-1610
Seamless Donations: A Platform for Global Fundraising and Rebuilding using Stripe and PayPal <= 5.1.7 - Cross-Site Request Forgery to Settings Chage
High
CVE-2022-1603
Mail Subscribe List <= 2.1.3 - Cross-Site Request Forgery
Medium
91c9fb05-e853-4d59-95ec-a0c2ff06565b
Envato Sales By Item <= 1.1 - Unauthenticated SQL Injection via AJAX call
Medium
75424878-5976-4dc6-8a09-8eb46a7425b8
Mail Subscribe List <= 2.1.6 - Stored Cross-Site Scripting
Medium
cfec9303-bdc5-4ba7-90dd-0c7559459d23
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.9.5 - Authenticated Cross-Site Scripting
High
d159130a-c99d-44d3-a130-aa0146f17157
Seamless Donations: A Platform for Global Fundraising and Rebuilding using Stripe and PayPal <= 5.1.12 - Cross-Site Scripting
Medium
CVE-2022-2224
Gallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post Duplication
Medium
CVE-2022-2223
Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication
High
2131e418-bd95-4bd1-868f-0bd3b4abdf78
Tainacan <= 0.18.9 - Cross-Site Scripting
Medium
CVE-2022-0745
Like Button Rating ♥ LikeBtn <= 2.6.44 - Arbitrary e-mail Sending
Medium
CVE-2022-1756
Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting
Critical
CVE-2022-0786
KiviCare – Clinic & Patient Management System (EHR) <= 2.3.8 - SQL Injection
High
CVE-2022-1761
Peter’s Collaboration E-mails <= 2.2.0 - Cross-Site Request Forgery
Medium
CVE-2022-1820
Keep Backup Daily <= 2.0.2 - Reflected Cross-Site Scripting
High
CVE-2022-1790
New User Email Set Up <= 0.5.2 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2022-1791
One Click Plugin Updater <= 2.4.14 - Cross-Site Request Forgery to Settings Update
High
642a6d42-100f-4461-b568-35e089287902
CRM WordPress Plugin – RepairBuddy <= 3.72 - SQL Injection
High
CVE-2022-1412
Log WP_Mail <= 0.1 - Sensitive Information Disclosure
High
CVE-2022-1605
Email Users <= 4.8.8 - Arbitrary Settings Update via Cross-Site Request Forgery
Critical
CVE-2022-1654
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation
High
CVE-2022-0863
WP SVG Icons <= 3.2.3 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2022-1717
Custom Share Buttons with Floating Sidebar <= 4.1 - Stored Cross-Site Scripting
Medium
CVE-2022-1604
MailerLite - Signup forms <= 1.5.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.