Medium
b6bff35f-f881-4c60-9611-4a04727bac36
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-4747
Post Category Image With Grid and Slider <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4552
FL3R FeelBox <= 8.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Medium
CVE-2022-4757
List Pages Shortcode <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4657
Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.5 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-4786
Video.js – HTML5 Video Player for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0086
JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update
Medium
822a3b3b-db39-4edc-ae68-80fb82359316
WordPress RSS Feed Retriever <= 1.6.7 - Missing Authorization
Medium
CVE-2022-4553
FL3R FeelBox <= 8.1 - Cross-Site Request Forgery leading to Plugin Settings Reset
Medium
7a5ab5f1-db14-4448-9186-35a5f382cd1a
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4872
WooCommerce Chained Products < 2.12.0 - Missing Authorization to Arbitrary Options Update
Medium
6b6ab7bc-e815-4b3f-bda1-dd816ca457cd
Twitter Cards Meta <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4835
Social Sharing Toolkit <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4793
Blog Designer - Post and Widget <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
63f1c60f-8f72-4c99-92af-340c67b7411f
Logaster Logo Generator <= 1.3 - Missing Authorization to Arbitrary Media Deletion and Creation
Medium
CVE-2022-4680
Revive Old Posts <= 9.0.10 - Authenticated (Admin+) PHP Object Injection
Medium
62559fd6-a338-4f0f-ab1a-33fffbdc687e
WordPress RSS Feed Retriever <= 1.6.7 - Cross-Site Request Forgery
Medium
CVE-2022-4785
Video Sidebar Widgets <= 6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4787
Themify Shortcodes <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0447
My YouTube Channel <= 3.0.12.1 - Missing Authorization
Medium
CVE-2022-47440
My Tickets <= 1.9.10 - Cross-Site Request Forgery
Medium
CVE-2022-4759
GigPress <= 2.3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4788
Embed PDF <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4395
Membership For WooCommerce <= 2.1.6 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.