Medium
CVE-2022-46817
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2022-4943
miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change
High
CVE-2022-47420
Accessibility Suite by Online ADA <= 4.12 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-46856
Woocommerce Product Designer <= 4.3.3 - Cross-Site Request Forgery
High
CVE-2022-4712
WP Cerber Security <= 9.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-22684
Subscribers – Free Web Push Notifications <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2179
WooCommerce Order Status Change Notifier <= 1.1.0 - Authenticated (Subscriber+) Arbitrary Order Status Update
Medium
CVE-2022-38356
Pearl <= 1.3.4 - Cross-Site Request Forgery via stm_save_hb_settings
High
CVE-2023-2180
Kiwiz - Certification de facturation - Woocommerce <= 2.1.3 - Unauthenticated Arbitrary File Download
Medium
CVE-2023-0520
RapidExpCart <= 1.0 - Authenticated (Level 8/Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-46818
Email posts to subscribers <= 6.2 - Unauthenticated SQL Injection
Medium
CVE-2022-46861
Login Page Styler <= 6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2015-10101
Google Analytics Top Content Widget <= 1.5.5 - Reflected Cross-Site Scripting
High
CVE-2022-47432
Shortcode IMDB <= 6.0.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-22703
WCP Contact Form <= 3.1.0 - Reflected Cross-Site Scripting via tab parameter
Medium
CVE-2022-47441
Charitable <= 1.7.0.10 - Reflected Cross-Site Scripting
Medium
CVE-2023-23674
WP Original Media Path <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-27455
Update Image Tag Alt Attribute <= 2.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-0812
Active Directory Integration / LDAP Integration <= 4.1.0 - Unauthenticated Information Disclosure
Medium
CVE-2023-27889
LIQUID SPEECH BALLOON <= 1.1.8 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-23641
Uji Popup <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via uji_popup_code shortcode
High
CVE-2023-1549
Ad Inserter <= 2.7.25 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2023-23671
Layer Slider <= 1.1.9.7 - Cross-Site Request Forgery via save_slide_ajax
Medium
CVE-2023-22672
vSlider Multi Image Slider <= 4.1.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.