Medium
31496229-bf54-466c-a87b-cc32e65500a4
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-35275
Advanced Order Export For WooCommerce <= 3.3.1 - Reflected Cross-Site Scripting
High
CVE-2022-1123
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) <= 3.12.4 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-50946
Netroics Blog Posts Grid <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
cd6f4f0d-0e70-459a-8f09-64d1f6f8bb7e
BuddyForms ACF <= 1.3.8 - Authenticated (Contributor+) Cross-Site Scripting
High
ad953bc7-5747-4936-b702-37386299369e
Pop-up <= 1.1.1 - Missing authorization to Settings Change
Medium
CVE-2022-2669
WP Taxonomy Import <= 1.0.5 - Reflected Cross-Site Scripting
High
CVE-2022-2718
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby
High
CVE-2022-2717
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby
Medium
CVE-2022-2373
Simply Schedule Appointments <= 1.5.7.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2022-2374
Simply Schedule Appointments <= 1.5.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1663
Stop Spam Comments <= 0.2.1.2 - Protection Mechanism Bypass
High
52daa230-1600-4ace-9adf-3f4e9be51e9f
Jupiter X Core <= 2.0.9 - Missing Authorization Checks
Medium
337d052c-6ee2-4cd0-8a69-a4b66b25517a
Announcement & Notification Banner – Bulletin <= 3.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2022-2638
Export All URLs <= 4.3 - Arbitrary File Deletion
High
CVE-2022-2434
String Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization
High
0ce2786e-2918-4dc0-99c4-db447216e140
Resize Image After Upload <= 1.8.5 - Cross-Site Request Forgery
Medium
CVE-2022-2538
WP Hide & Security Enhancer <= 1.7.9.2 - Reflected Cross-Site Scripting
Medium
88f447d5-990f-4d86-93a3-fd11b63af408
Custom Product Tabs Lite for WooCommerce <= 1.7.6 - Authenticated (Store Manager+) Stored Cross-Site Scripting
Critical
3dd08e56-0425-4711-87f1-39625f0ffae2
Mobile Assistant Connector <= 2.2.2 - SQL Injection
Medium
CVE-2022-31175
CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process
Medium
CVE-2022-35918
Streamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custom components are vulnerable to a directory traversal attack that could leak data
High
CVE-2022-31197
PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names
High
CVE-2022-31195
DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.