Medium
CVE-2022-0174
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2021-43297
Deserialization of Untrusted Data in Dubbo
High
CVE-2022-0155
Exposure of sensitive information in follow-redirects
Medium
CVE-2022-21671
Potential exposure of tokens to an Unauthorized Actor
High
CVE-2021-21408
Access to restricted PHP code by dynamic static class access in smarty
High
CVE-2021-29454
Sandbox Escape by math function in smarty
High
CVE-2022-0087
Reflected cross-site scripting (XSS) vulnerability
Medium
ghsa-rrgw-3hg3-9x8c
XSS vulnerability in translations
Critical
ghsa-2w8g-m5j8-7m87
Zalgo-like output that crashes the server
Medium
CVE-2022-25605
WP-DownloadManager plugin <= 1.68.6 - Stored Cross-Site Scripting
Medium
CVE-2021-44649
Cross-site Scripting in django-cms
Medium
CVE-2022-0181
Quiz And Survey Master <= 7.3.6 - Reflected Cross-Site Scripting
High
CVE-2022-0180
Quiz And Survey Master <= 7.3.6 - Cross-Site Request Forgery
Medium
CVE-2022-0176
PowerPack Lite for Beaver Builder <= 1.2.9.2 Reflected Cross-Site Scripting
High
d21bebcc-8dba-407d-8a3a-b91d3cddd38f
WP Ultimate CSV Importer <= 6.4.0 - Arbitrary File Upload
Medium
CVE-2021-25050
Remove Footer Credit <= 1.0.10 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0209
Mitsol Social Post Feed <= 1.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-24874
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.30 - Reflected Cross-Site Scripting via lang & pid Parameters
Medium
CVE-2022-0182
Quiz And Survey Master <= 7.3.6 - Stored Cross-Site Scripting
Medium
391ef7e0-d4e6-4c2e-b15e-65bdba190b69
Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks
Medium
CVE-2021-25014
Ibtana – WordPress Website Builder <= 1.1.4.7 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2022-22821
Path Traversal in nemo-toolkit
High
ce779d08-93bf-4634-bb83-f5573876e086
Powerkit < 2.5.9 - Cross-Site Request Forgery
High
CVE-2022-23975
AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/Activation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.