High
CVE-2022-45824
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-3840
Google Apps Login <= 3.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-41965
Authenticated OpenRedirect Vulnerability
Medium
CVE-2022-22984
Snyk plugins vulnerable to Command Injection
Critical
CVE-2022-44136
Zenario CMS is vulnerable to Remote Code Execution (RCE).
Unrated
drupal-contrib-2022-060
drupal/socialbase - SA-CONTRIB-2022-060
Medium
CVE-2022-4231
Tribal Systems Zenario CMS vulnerable to Session Fixation
High
fa7ca972-ddb0-416b-8c5a-b4e9648ca957
Booster for WooCommerce <= 5.6.8 - Cross-Site Request Forgery
Medium
CVE-2022-44582
Apptivo Business Site CRM <= 3.0.12 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-4140
Welcart e-Commerce 2.6.10-2.8.4 - Information Disclosure via Arbitrary File Read
Critical
CVE-2022-4117
IWS - Geo Form Fields <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2022-41616
Export Users Data CSV <= 2.1 - Authenticated (Subscriber+) CSV Injection
Medium
CVE-2022-4042
Paytium <= 4.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Low
CVE-2022-45833
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2022-44594
All in One Time Clok Lite <= 1.3.320 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-42699
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2022-45829
Easy WP SMTP <= 1.5.1 - Authenticated (Admin+) Arbitrary File Deletion
Medium
CVE-2022-44631
1app Business Forms <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2022-43453
WP Tools <= 3.41 - Missing Authorization leading to Authenticated (Subscriber+) Authorization Bypass
Medium
CVE-2022-4197
Sliderby10Web <= 1.2.52 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-4110
Eventify <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-21126
HTSJDK is vulnerable to exposure of resource(s) to the wrong sphere
High
CVE-2022-25848
static-dev-server vulnerable to path traversal
Medium
CVE-2022-4036
Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.