Medium
CVE-2022-1166
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2018-17145
Bitcoin Inventory Out-of-Memory Denial-of-Service Attack (CVE-2018-17145)
Low
CVE-2020-15171
Users with SCRIPT right can execute arbitrary code in XWiki
Low
CVE-2020-15168
The `size` option isn't honored after following a redirect in node-fetch
Medium
CVE-2020-24660
Lack of URL normalization may lead to authorization bypass when URL access rules are used
Medium
CVE-2020-15163
Invalid root may become trusted root in The Update Framework (TUF)
Low
ghsa-rxq3-5249-8hgg
personnummer/python vulnerable to Improper Input Validation
Low
ghsa-qv8q-v995-72gr
personnummer/csharp vulnerable to Improper Input Validation
Low
ghsa-2p6g-gjp8-ggg9
personnummer/php vulnerable to Improper Input Validation
Critical
CVE-2019-10692
WP Go Maps (formerly WP Google Maps) <= 7.11.17 - SQL Injection
Medium
CVE-2020-5780
Email Subscribers & Newsletters <= 4.5.5 - Unauthenticated Email Forgery
Medium
387ab7c1-0ca2-41e0-b6a1-ed33e7b02cad
Love Travel 2.0 - 3.7 - Reflected Cross-Site Scripting
Medium
0f4aa403-5a8e-4e4d-a009-3f7bfdc7ada3
Love Travel 1.0 - 1.9 - Reflected Cross-Site Scripting and Cross-Frame Scripting
Medium
e10dd0e6-1567-437b-ace7-fae013d66514
Custom Dashboard & Login Page – AGCA <= 6.5.4 - Reflected Cross-Site Scripting
Medium
bc91449a-7013-430d-bf7c-70175ea45114
LearnPress <= 3.2.7.2 - Reflected Cross-Site Scripting
Medium
a0297cab-8b6f-4e09-b552-4772c6f72c04
Elementor Addon Elements <= 1.6.3 - Reflected Cross-Site Scripting
Medium
765df8f4-438c-41b6-ac74-494f1b74cf33
Cookiebot | GDPR/CCPA Compliant Cookie Consent and Control <= 3.6.0 - Reflected Cross-Site Scripting
Medium
4625d217-99d4-47d8-b093-fe55a3018348
Sticky Menu & Sticky Header <= 2.20 - Reflected Cross-Site Scripting
Medium
1f092dae-e298-42e3-b494-fc7b7669b300
All In One WP Security & Firewall <= 4.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24133
ActiveCampaign < 8.0.2 - Cross-Site Request Forgery
High
CVE-2021-24141
Advanced Database Cleaner <= 3.0.1 - SQL injection
Medium
CVE-2020-36750
EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24134
Constant Contact Forms <= 1.8.7 Editor+ Stored Cross-Site Scripting
Medium
CVE-2020-36831
NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.