Medium
CVE-2022-40312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 196
Reset filters
Medium
CVE-2022-4448
GiveWP <= 2.23.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-0224
GiveWP <= 2.23.2 - Unauthenticated SQL Injection
Medium
CVE-2023-22716
OOPSpam Anti-Spam <= 1.1.35 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-0176
Giveaways and Contests by RafflePress <= 1.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
4394f96a-ceb5-463f-b454-a6fa4a59fc45
WordPress Core < 6.0.3 - Authenticated Information Disclosure via REST-API
Low
2f0d4f48-a315-4308-a5b6-7d3f045b292f
WordPress Core < 6.0.3 - Information Disclosure (Multi-Part Email Leak)
High
CVE-2022-3395
WP ALL Export Pro <= 1.7.8 - Authenticated SQL Injection
High
CVE-2022-3394
WP ALL Export Pro <= 1.7.8 - Authenticated Remote Code Execution
Medium
CVE-2022-31475
GiveWP <= 2.20.2 - Authenticated Arbitrary File Read
Medium
CVE-2022-28700
GiveWP <= 2.20.2 - Authenticated Arbitrary File Creation
Medium
CVE-2022-2215
GiveWP <= 2.21.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2260
GiveWP – Donation Plugin and Fundraising Platform <= 2.21.2 - Cross-Site Request Forgery
Medium
CVE-2022-2117
GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure
Medium
CVE-2022-1390
Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read
High
CVE-2022-1239
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 8.8.13 - Server Side Request Forgery
Critical
3ed280ba-d7e5-4637-ab84-93dc82c009d8
Admin Word Count Column <= 2.2 - Arbitrary File Read
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Critical
CVE-2022-0441
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
Medium
CVE-2021-25099
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-25100
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-0252
GiveWP <= 2.17.2 - Reflected Cross-Site Scripting via Import Tool
Medium
CVE-2021-25033
WordPress Newsletter Plugin – Noptin < 1.6.5 - Open Redirect
Medium
CVE-2021-25028
Event Tickets <= 5.2.1 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.