High
CVE-2022-25171
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2022-25931
easy-static-server vulnerable to Directory Traversal
Medium
ee11d9e5-64d5-49b4-b5f5-b76605250028
GeoDirectory <= 2.2.19 - CSV Injection
Medium
CVE-2022-4299
Metricool <= 1.17 - Authenticated (Administrator+) Stored Stored Cross-Site Scripting
Critical
CVE-2022-45355
WP Pipes <= 1.33 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-4426
Mautic Integration for WooCommerce < 1.0.3 - Cross-Site Request Forgery leading to Arbitrary Options Update
Medium
CVE-2022-4674
Ibtana – WordPress Website Builder <= 1.1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4431
WOOCS <= 1.3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-4481
Mesmerize Companion <= 1.6.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-45820
LearnPress <= 4.1.7.3.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-4477
Smash Balloon Social Post Feed <= 4.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4325
Post Status Notifier Lite <= 1.10.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4476
Download Manager <= 3.2.61 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-44940
Patchelf out-of-bounds read
Medium
CVE-2022-42949
SilverStripe Subsite weakens file permissions
Medium
CVE-2021-4260
Oils JS vulnerable to Open Redirect
Critical
CVE-2020-36618
FurqanSoftware/node-whois vulnerable to Prototype Pollution
Critical
CVE-2021-4262
laravel-jqgrid vulnerable to SQL Injection
Medium
CVE-2022-47500
Apache Helix UI vulnerable to Open Redirect
High
CVE-2016-20018
Knex.js has a limited SQL injection vulnerability
Medium
CVE-2022-4468
WP Recipe Maker <= 8.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4497
Jetpack CRM <= 5.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-3416
WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2022-3417
WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.