Medium
CVE-2022-44595
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-4306
Panda Pods Repeater Field <= 1.5.3 - Reflected Cross-Site Scripting
Critical
CVE-2022-3241
Build App Online <= 1.0.18 - Unauthenticated SQL Injection
High
ef1468eb-9b98-4d45-b357-70998ba17de7
UpdraftCentral Dashboard 0.8.23 - Server-Side Request Forgery
High
d2031289-eaf3-4a1b-8771-769c08d99ca3
Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery
High
d0301141-bbc6-4a9e-b816-888554600b57
iubenda <= 3.3.2 - Cross-Site Request Forgery
Medium
CVE-2022-4256
All-in-One Addons for Elementor - WidgetKit <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4519
WP User <= 7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4260
WP-Ban <= 1.69 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4142
WordPress Filter Gallery Plugin <= 0.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
145fec62-87a7-4641-9ce4-dca5afb47d69
Add to home screen WP Plugin <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4236
Welcart e-Commerce <= 2.8.4 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2022-4166
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via addCountS
High
CVE-2022-4150
Contest Gallery (Pro) <= 19.1.5 - SQL Injection via option_id
Medium
CVE-2022-3835
Kwayy HTML Sitemap <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scipting
High
CVE-2022-4153
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via upload[]
Medium
CVE-2022-4227
Booster (<= 5.6.2), Booster Plus (< 6.0.0), and Booster Elite (< 6.0.0) for WooCommerce - Reflected Cross-Site Scripting
High
CVE-2022-4159
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via cg_id
Medium
CVE-2022-3853
Supra CSV <= 4.0.3 - Stored Cross-Site Scripting via Cross-Site Request Forgery
High
CVE-2022-41650
Custom Content by Country <= 3.1.2 - Cross-Site Request Forgery
High
CVE-2022-4162
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_row
High
CVE-2022-4165
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_order
High
CVE-2022-4152
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id GET
Medium
CVE-2022-45816
GD bbPress Attachments <= 4.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.