Medium
CVE-2018-18855
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-31052
URL previews of unusual or maliciously-crafted pages can crash Synapse media repositories or Synapse monoliths
Medium
CVE-2022-30536
WP Maintenance <= 6.0.7 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-2217
Cross site scripting in parse-url
Critical
CVE-2022-2216
Server-Side Request Forgery in parse-url
Medium
CVE-2022-2218
Cross site scripting in parse-url
High
CVE-2022-0722
Hostname confusion in parse-url
Low
CVE-2022-33879
Apache Tika contains incomplete fix for regex DoS
Medium
CVE-2022-28666
Custom Product Tabs for WooCommerce <= 1.7.7 - Subscriber+ Settings Update
High
CVE-2022-2240
Request a Quote <= 2.3.8 - CSV Injection
High
d0a81d60-d489-4786-aa21-805a1e2aa198
Ad Inserter Pro <= 2.7.15 - Arbitrary File Modification
Critical
CVE-2022-36386
WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution
Medium
CVE-2022-1551
SP Project & Document Manager <= 4.57 - Sensitive File Disclosure
Medium
6c6e9884-0b60-4ea8-b042-55cf0fb6a6d0
Dropdown Menu Widget <= 1.9.7 - Reflected Cross-Site Scripting
Medium
63e167ef-9f03-45a8-b3dc-240ccf1ea6c3
Photo Gallery by 10Web <= 1.6.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-2071
Name Directory <= 1.25.3 - Cross-Site Request Forgery
Medium
CVE-2022-2239
Request a Quote <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-26477
SystemDS CPU exhaustion vulnerability
High
CVE-2022-2133
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Authentication Bypass
High
CVE-2022-2144
Jquery Validation For Contact Form 7 <= 5.2 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2022-2168
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
High
CVE-2022-1672
Insights from Google PageSpeed <= 4.0.6 - Multiple Cross-Site Request Forgery
Medium
bb929679-85bb-4d5b-9a99-e6081d55019f
miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2022-2173
Advanced Database Cleaner <= 3.1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.