Medium
CVE-2022-3438
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2022-3419
Automatic User Roles Switcher <= 1.1.1 - Missing Authorization to Privilege Escalation
High
CVE-2022-3334
Easy WP SMTP <= 1.4.9 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-3237
WP Contact Slider <= 2.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3441
Rock Convert <= 2.10.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-41620
SeoSamba for WordPress Webmasters <= 1.0.5 - Cross-Site Request Forgery
High
CVE-2022-3380
Customizer Export/Import <= 0.9.4 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3374
Ocean Extra <= 2.0.4 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3366
PublishPress Capabilities <= 2.5.1 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-3440
Rock Convert <= 2.10.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-2627
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Medium
67e3096e-7641-4f95-9e16-c1b45028c7eb
eCommerce Product Catalog Plugin for WordPress <= 3.0.70 - Reflected Cross-Site Scripting
High
CVE-2022-3357
Smart Slider 3 <= 3.5.1.9 - PHP Object Injection
Critical
CVE-2022-3254
AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection
Medium
CVE-2022-2190
Gallery Plugin for WordPress – Envira Photo Gallery <= 1.8.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-3096
WP Total Hacks <= 4.7.2 - Authenticated (Subscriber+) Plugin Options Update to Cross-Site Scripting
Medium
CVE-2022-2167
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Medium
05c4d7e3-f8a8-4c11-b962-38922b0801f9
s2Framework <= 4.1.5 - Reflected Cross-Site Scripting
High
CVE-2022-39287
tiny-csrf has openly visible CSRF tokens
High
CVE-2022-41672
In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.
Medium
CVE-2022-3423
NocoDB vulnerable to Denial of Service
Medium
CVE-2022-41414
Liferay Portal Insecure Default Configuration in auth.login.prompt.enabled
High
CVE-2022-42092
Backdrop CMS Unrestricted File Upload vulnerability
High
CVE-2022-35923
v8n vulnerable to Inefficient Regular Expression Complexity
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.