Medium
CVE-2022-2252
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-2073
Code injection in grav
High
CVE-2022-29495
Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.1.11 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2022-33198
Accordions – Multiple Accordions or FAQs Builder <= 2.0.2 - Unauthenticated Arbitrary Options Update
Medium
CVE-2022-1326
Form – Contact Form <= 1.2.0 - Administrator+ Cross-Site Scripting
Medium
CVE-2022-2189
WP Video Lightbox <= 1.9.4 - Reflected Cross-Site Scripting
Medium
a626dfd4-d8c3-4cd1-a624-bae719bea93a
Music Player for WooCommerce <= 1.0.172 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-1565
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload
Critical
CVE-2022-34487
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.0.2 - Unauthenticated Arbitrary Options Update
High
CVE-2022-2241
Featured Image from URL (FIFU) <= 3.9.9 - Cross-Site Request Forgery
Medium
CVE-2022-29858
Unpublished, protected files can be published via shortcode
Medium
CVE-2021-41559
Quadratic blowup in Convert::xml2array()
Medium
CVE-2022-25238
Stored XSS via HTML fields in SilverStripe Framework
Medium
CVE-2022-28803
Stored XSS in link tags added via XHR in SilverStripe Framework
Medium
CVE-2022-24444
Hybridsessions does not expire session id on logout
Unrated
drupal-contrib-2022-047
drupal/config_terms - SA-CONTRIB-2022-047
Unrated
drupal-contrib-2022-046
drupal/lottiefiles_field - SA-CONTRIB-2022-046
High
CVE-2022-0624
Authorization Bypass in parse-path
Medium
CVE-2022-23896
Cross-site Scripting in admidio
Medium
CVE-2022-0085
Server-Side Request Forgery in dompdf/dompdf
High
CVE-2022-2184
CAPTCHA 4WP <= 7.0.6.1 - Cross-Site Request Forgery to Local File Inclusion
Medium
db2a0b6f-5629-4ebe-8431-ebb3bc583e31
WordPress Popular Posts <= 5.5.1 - Reflected Cross-Site Scripting
Medium
45f3568c-b6d9-4d00-a8cd-571443d80fd3
Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin <= 2.43 - Cross-Site Scripting
Medium
CVE-2022-2219
Unyson <= 2.7.26 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.