Medium
dacfba3e-c1d7-475c-885b-f77b77a65f91
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 391
Reset filters
Critical
CVE-2022-1014
WP Contacts Manager <= 2.2.4 - Unauthenticated SQL Injection
Critical
CVE-2022-0867
Pricing Table Plugin <= 3.6 - Unauthenticated SQL Injection
Critical
CVE-2022-1013
Personal Dictionary <= 1.3.3 - Unauthenticated SQL Injection
Critical
CVE-2022-0773
Documentor – Create Product Documentation <= 1.5.3 - Unauthenticated SQL Injection
Critical
CVE-2022-0769
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 3.1.0 - Unauthenticated SQL Injection
Critical
CVE-2022-0949
WP Block and Stop Bad Bots <= 6.92 - SQL Injection
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
e09e48db-f74a-4663-a724-24938a6c277c
Multiple Themes (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2021-24814
WordPress GDPR & CCPA < 1.9.26 - Reflected Cross-Site Scripting
Medium
CVE-2022-0220
WordPress GDPR & CCPA <= 1.9.26 Reflected Cross-Site Scripting
Medium
CVE-2022-0176
PowerPack Lite for Beaver Builder <= 1.2.9.2 Reflected Cross-Site Scripting
Medium
CVE-2021-25027
PowerPack Addons for Elementor <= 2.6.1 - Reflected Cross-Site Scripting
High
CVE-2021-39321
Sassy Social Share 3.3.23 - Object Injection
Medium
CVE-2021-39332
Business Manager <= 1.4.5 - Stored Cross-Site Scripting
Medium
86e6a246-557a-42f7-8f1b-b1b914f9f928
Afterpay Gateway for WooCommerce <= 3.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-34630
GTranslate Pro and GTranslate Enterprise <= 2.8.64 - Reflected Cross-Site Scripting
Medium
CVE-2021-24540
Wonder Video Embed <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2021-24541
Wonder PDF Embed <= 1.6 - Contributor+ Stored Cross-Site Scripting
Critical
CVE-2021-34622
ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation
Medium
CVE-2021-24319
Bello - Directory & Listing - < 1.6.0 - Cross-Site Scripting
Medium
CVE-2021-24263
PowerPack Addons for Elementor <= 2.3.1 - Contributor+ Stored Cross-Site Scripting
High
CVE-2021-24123
PowerPress <= 8.3.7 - Arbitrary File Upload
Medium
CVE-2020-36735
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.