Medium
CVE-2022-3206
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
66b6443a-3bd0-4f45-8ad3-424d11ec24e1
No Page Comment <= 1.1 - Reflected Cross-Site Scripting
High
CVE-2022-40219
FavIcon Switcher <= 1.2.11 - Cross-Site Request Forgery
Medium
CVE-2022-3149
WP Custom Cursors <= 3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-3151
WP Custom Cursors <= 3.0 - Cross-Site Request Forgery to Cursor Manipulation
Medium
CVE-2022-41619
Image Zoom <= 1.8.8 - Missing Authorization
High
CVE-2022-2864
demon image annotation <= 4.7 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2022-31166
XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups
High
CVE-2022-31167
XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference
High
CVE-2022-39218
Fastly Compute@Edge JS Runtime has fixed random number seed during compilation
Critical
CVE-2022-38545
Valine code injection vulnerability
High
e2389b9c-c766-4cb7-83d6-b0ad7d2a075e
No Page Comment <= 1.1 - Cross-Site-Request Forgery to Settings Change
Medium
cbdb3be2-50c5-4516-bce1-8785e338fe5c
Tidio – Live Chat, Chatbots & Email Integration <= 5.2.0 - Sensitive Information Disclosure
Medium
CVE-2022-3244
WP Ultimate CSV Importer <= 6.5.7 - Missing Authorization
High
CVE-2022-3131
Search Logger <= 0.9 - Authenticated (Administrator+) SQL Injection
High
537bdd21-7ebd-4c17-a681-18703ac973a5
Image Zoom <= 1.8.8 - Cross-Site Request Forgery
Medium
CVE-2022-3139
We’re Open! <= 1.41 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-3243
WP Ultimate CSV Importer <= 6.5.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-25873
Vuetify Cross-site Scripting vulnerability
High
CVE-2022-3208
Simple File List <= 4.4.12 - Cross-Site Request Forgery to Page Creation
Medium
CVE-2022-3207
Simple File List <= 4.4.11 - Reflected Cross-Site Scripting
Medium
a2ad2c0d-542e-4b40-91a8-19b27297545e
Contact Form by WPForms <= 1.7.5.3 - Authenticated (Administrator+) Arbitrary File Access via Path Traversal
Medium
CVE-2022-2448
reSmush.it Image Optimizer <= 0.4.5 - Authenticated (Administrator+) Cross-Site Scripting
Medium
80192348-dcf4-4bab-80d1-ae7a4d194270
Breeze <= 2.0.8 - Cross-Site Request Forgery via import_json_settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.