Medium
CVE-2022-45348
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-28747
CBX Currency Converter <= 3.0.3 - Cross-Site Request Forgery leading to Plugin Settings Leakage/Changes
Medium
CVE-2023-1413
WP VR <= 8.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-28688
TH Variation Swatches <= 1.2.7 - Cross-Site Request Forgery via delete_settings
Medium
CVE-2023-0374
W4 Post List <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Options
Medium
CVE-2022-43472
eRoom – Zoom Meetings & Webinar <= 1.4.6 - Missing Authorization via stm_wpcfto_get_settings_callback
Medium
CVE-2023-1371
W4 Post List <= 2.4.5 - Information Disclosure via post_excerpt
Medium
CVE-2022-41698
If Menu <= 0.16.3 - Missing Authorization to Admin Settings Modification
Medium
CVE-2022-44578
Owl Carousel <= 0.5.3 - Missing Authorization via save_paramter.php
High
CVE-2023-1274
Pricing Tables For WPBakery Page Builder (formerly Visual Composer) <= 2.0 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
Medium
20daf751-176d-48f2-ac68-480fda89cee1
WordPress Pinterest Plugin <= 1.6.1 - Stored (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2023-28694
Wbcom Designs – BuddyPress Activity Social Share <= 3.5.0 - Cross-Site Request Forgery
Medium
CVE-2023-25969
Multiple Plugins By ThemeHunk (Various Versions) - Missing Authorization via settings_init
High
CVE-2023-28659
Waiting: One-click countdowns <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'pbc_down[meta][id]'
Medium
CVE-2022-46804
Export Users Data Distinct <= 1.3 - Authenticated (Subscriber+) CSV Injection
High
CVE-2023-27087
Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
Critical
CVE-2018-25082
weixin-python XML External Entity vulnerability
High
CVE-2023-1545
Teampass SQL Injection vulnerability
Medium
CVE-2023-25469
Easy Table of Contents <= 2.0.45.2 - Missing Authorization via eztoc_reset_options_to_default
Medium
CVE-2022-47439
Open Graphite <= 1.6.0 - Reflected Cross-Site Scripting via topic parameter
Medium
ce6ea115-941e-482f-a2a4-95293ff10a69
Contact Form Email <= 1.3.31 - Cross-Site Request Forgery to Feedback Submission
Medium
CVE-2023-22695
Custom Field Template <= 2.5.8 - Cross-Site Request Forgery via Plugin Options Update
Medium
CVE-2023-25478
Weather Station <= 3.8.11 - Cross-Site Request Forgery
Medium
CVE-2023-22694
BigContact <= 1.5.8 - Cross-Site Request Forgery leading to Plugin Settings Updates
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.