Medium
CVE-2022-32289
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
1610b3dd-582e-4ff2-956a-95845361c66b
Dyslexiefont Free <= 0.0.2 - Cross-Site Scripting
Medium
CVE-2022-29257
AutoUpdater module fails to validate certain nested components of the bundle
Low
CVE-2022-29247
Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
Medium
CVE-2022-29238
Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only
Medium
CVE-2021-36849
Social Media Share Buttons <= 3.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-33140
Code injection in Apache NiFi and NiFi Registry
High
CVE-2021-33036
User account escalation in Apache Hadoop
Medium
CVE-2022-1546
WooCommerce – Product Importer <= 1.5.2 - Reflected Cross-Site Scripting
High
CVE-2022-1938
Awin Data Feed <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-2050
WP-Paginate <= 2.1.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1937
Awin Data Feed <= 1.7 - Reflected Cross-Site Scripting
High
ba52c97e-9f2a-4e48-a133-79ed31cfbf3a
HC Custom WP-Admin URL <= 1.4 - Missing Authorization to Login URL Change
High
CVE-2022-1957
Comment License <= 1.3.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-2092
WooCommerce PDF Invoices & Packing Slips <= 2.15.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-1956
Shortcut Macros <= 1.3 - Missing Authorization to Settings Update
Medium
93c1b6d2-a818-4ce5-96b7-524fac4081b2
Photo Gallery by 10Web <= 1.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-1220
FoxyShop <= 4.8.1 - Reflected Cross-Site Scripting
High
CVE-2022-1912
Button Widget Smartsoft <= 1.0.1 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2022-1057
Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQL Injection
Medium
CVE-2022-2108
Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
Medium
CVE-2022-1732
Rename wp-login.php <= 2.6.0 - Cross-Site Request Forgery & Unauthenticated Settings Change
Medium
01857d1d-4b6c-4ab0-b2ef-6a948daedbe0
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.6.1 - Cross-Site Scripting
Medium
CVE-2021-36891
Photo Gallery by Supsystic <= 1.15.5 - Cross-Site Request Forgery to Plugin Settings Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.