Medium
CVE-2022-29923
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
High
79a41b84-2e19-46eb-9f6b-5155da0b15cc
Google Tag Manager for WordPress <= 1.15 - Cross-Site Scripting via Cloudflare Country Code
Medium
CVE-2022-45084
Loginizer <= 1.7.5 - Reflected Cross-Site Scripting via 'name'
Medium
CVE-2022-1569
WordPress Forms by Pie Forms <= 1.4.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-1695
WP Simple Adsense Insertion <= 2.0 - Cross-Site Request Forgery
High
CVE-2022-1397
Privilege escalation in easyappointments
High
CVE-2022-1537
Race Condition in Grunt
Medium
CVE-2022-1005
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting
Critical
CVE-2022-0788
WP Fundraising Donation and Crowdfunding Platform <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2022-1673
WooCommerce Green Wallet Gateway <= 1.0.1 - Reflected Cross-Site Scripting
High
CVE-2022-1577
Database Backup for WordPress <= 2.5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-24823
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
High
CVE-2022-1631
Incorrect Authorization in microweber
High
CVE-2022-29933
Improper account password reset in Craft CMS
Medium
CVE-2022-1395
Easy FAQ with Expanding Text <= 3.2.8.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1597
WPQA - Builder forms Addon For WordPress <= 5.3 - Reflected Cross-Site Scripting
Medium
58884dcb-dad3-4856-aa54-c5b769d4f9e1
Use Any Font | Custom Font Uploader <= 6.2.7 - Cross-Site Scripting
High
28bdad82-f09a-461f-b826-3f458f121fea
Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam <= 2.0.0 - Cross-Site Scripting
Medium
CVE-2022-1566
Quotes llama <= 0.7 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1598
WPQA - Builder forms Addon For WordPress <= 5.4 - Unauthenticated Private Message Disclosure
High
CVE-2018-25033
ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.
Critical
CVE-2022-28470
marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
High
CVE-2022-1611
Bulk Page Creator <= 1.1.3 - Cross-Site Request Forgery to Arbitrary Page Creation
High
CVE-2022-1689
Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.