Medium
7255319c-8175-4885-8f94-3f46f9e577a6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2021-24942
Menu Item Visibility Control <= 0.5 - Authenticated (Admin+) Remote Code Execution
High
CVE-2022-4163
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate
Medium
CVE-2022-4029
Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value
High
CVE-2022-4027
Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies
High
CVE-2022-3605
WP CSV Exporter <= 1.3.6 - CSV Injection
High
CVE-2022-4030
Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion
High
CVE-2022-45362
Paytm Payment Gateway <= 2.7.0 - Unauthenticated Server-Side Request Forgery
High
CVE-2022-4151
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id
Low
CVE-2022-4031
Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification
Medium
CVE-2022-45836
Download Manager <= 3.2.59 - Refleced Cross-Site Scripting
Critical
CVE-2022-4061
JobBoardWP <= 1.2.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-3961
Directorist <= 7.4.3 - Authenticated (Subscriber+) Sensitive Information Disclosure
Medium
CVE-2022-3832
External Media <= 1.0.35 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-4125
Popup Manager <= 1.6.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-41640
Wholesale Suite <= 2.1.5 - Authenticated (Subscriber+) Cross-Site Scripting
High
CVE-2022-4106
Wholesale Market for WooCommerce <= 1.0.6 - Unauthenticated Arbitrary File Download
Medium
CVE-2022-4058
Photo Gallery <= 1.8.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-4555
WP Shamsi <= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivation
Medium
CVE-2022-4948
FlyingPress <= 3.9.6 - Missing Authorization
Medium
CVE-2022-4108
Wholesale Market for WooCommerce <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Download
Critical
CVE-2022-4050
JoomSport <= 5.2.7 - Unauthenticated SQL Injection
High
3b71805c-15bb-4cde-b91f-4f3e9b7ab520
Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery
Critical
CVE-2022-4063
InPost Gallery <= 2.1.4.1 - Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.