High
CVE-2022-35142
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
fc329aee-e777-41eb-8799-539c891bd03b
Testimonial Slider <= 2.2.6 - Stored Cross-Site Scripting
Medium
f2e36b11-db93-4bac-a9bd-16d2e22efe4d
WP-MUI – Mass User Input – Add and Export WP Users Quickly <= 1.8 - Missing Authorization
Medium
ecde34f7-4624-4361-8d95-56fd4b08b476
Minimal Coming Soon – Coming Soon Page <= 2.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
dc37397e-cd23-4ffd-9771-316d7f9ff9fa
Twitter Bootstrap Slider <= 1.1.3 - Authenticated (Admin+) Cross-Site Scripting
Medium
cd93da2b-a64d-45a0-8d6c-e2a93ef20e13
WordPress to Hootsuite <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
Medium
c133c31e-e80a-4293-b19d-22e8bc8f677b
WordPress to Buffer <= 3.8.1 - Authenticated (Admin+) Cross-Site Scripting
High
96bc0d9b-1f03-48d4-aa99-954e92e77c04
Cyclone Slider <= 3.2.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
878671d2-572c-43f9-8fba-f2e2e955b7a6
Protect WP Admin <= 3.7 - Cross-Site Scripting
High
6635db72-8302-421d-9011-7eabb57c43a2
Contempo Real Estate Custom Posts <= 3.2.6 - Unauthorized File Upload
High
5bf0267d-b84f-4ad2-8bb3-cc2aa4996af1
PostmagThemes Demo Import <= 1.0.6 - Authenticated (Admin+) Arbitrary File Upload
Medium
2ae939f4-5a90-48ca-ae13-2ccbd6d8d08a
Simple Telegram <= 0.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
12ad3c6c-9a01-4801-b754-79e6e1b2d2a3
WooCommerce Product Carousel, Slider & Grid Ultimate <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2080
Sensei LMS <= 4.5.1 - Missing Authorization
Medium
CVE-2022-2034
Sensei LMS <= 4.4.3 - Information Disclosure
High
CVE-2022-2657
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Multiple Unprotected AJAX Actions
Medium
332b8d96-89b2-473b-9186-239e49f5b064
Download Manager <= 3.2.53 - Reflected Cross-Site Scripting
High
CVE-2022-36359
Django vulnerable to Reflected File Download attack
High
CVE-2022-25867
Socket.IO-client Java before 2.0.1 vulnerable to NULL Pointer Dereference
Critical
CVE-2020-7795
get-npm-package-version Command Injection vulnerability
Critical
CVE-2020-28453
npos-tesseract Command Injection vulnerability
Critical
CVE-2020-28451
image-tiler susceptible to command injection
Critical
CVE-2020-28437
heroku-env susceptible to command injection
Critical
CVE-2020-28434
gitblame susceptible to command injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.