High
CVE-2022-4159
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-3853
Supra CSV <= 4.0.3 - Stored Cross-Site Scripting via Cross-Site Request Forgery
High
CVE-2022-41650
Custom Content by Country <= 3.1.2 - Cross-Site Request Forgery
High
CVE-2022-4162
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_row
High
CVE-2022-4165
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_order
High
CVE-2022-4152
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id GET
Medium
CVE-2022-45816
GD bbPress Attachments <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-4120
Stop Spammers Security <= 2022.5 - Unauthenticated PHP Object Injection
Medium
CVE-2022-4057
Autoptimize <= 3.0.4 - Sensitive Information Disclosure
Medium
CVE-2023-7286
ACF Quick Edit Fields <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
CVE-2022-4237
Welcart e-Commerce <= 2.8.5 - Authenticated (Subscriber+) Information Disclosure and PHAR deserialization
Medium
CVE-2022-4154
Contest Gallery Pro <= 19.1.4.1 - Authenticated (Administrator+) SQL Injection via wp_user_id
High
CVE-2022-4161
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_start
High
CVE-2022-4160
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_id
High
CVE-2022-4164
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_multiple_files_for_post
Medium
27205ad8-991f-4011-b1fd-759829acabd3
Essential Real Estate <= 3.9.6 - Reflected Cross-Site-Scripting
High
CVE-2022-4155
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via wp_user_id
High
CVE-2022-4157
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_option_id
High
CVE-2022-4156
Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id
Medium
CVE-2022-45079
Loginizer <= 1.7.5 - Cross-Site Request Forgery
High
CVE-2022-4158
Contest Gallery <= 19.1.4.1 - Unauthenticated SQL Injection via cg_Fields
Critical
CVE-2022-25912
simple-git < 3.15.0 - Remote Code Execution
High
CVE-2022-4268
Plugin Logic <= 1.0.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-4243
ImageInject <= 1.18 - Authenticated (Admin+) Stored XSS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.