Critical
CVE-2022-3900
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2022-3982
Booking calendar, Appointment Booking System <= 3.2.1 - Unauthenticated Arbitrary File Upload
Critical
CVE-2022-3915
Dokan <= 3.7.5 - Unauthenticated SQL Injection
Medium
CVE-2022-3880
Anti Hacker <= 4.19 - Missing Authorization to Arbitrary Plugin Install
Medium
CVE-2022-45349
Betheme <= 26.6.2 - Missing Authorization to Post Title Change
High
CVE-2022-3930
Directorist <= 7.4.2.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Medium
CVE-2022-45363
Betheme <= 26.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2022-3921
Listingo <= 3.2.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-45352
Betheme <= 26.6.2 - Missing Authorization to Theme Settings Update
Medium
CVE-2022-4016
Booster (<= 5.6.6), Booster Plus (<= 5.6.5), and Booster Elite (<= 1.1.7) for WooCommerce - Cross-Site Request Forgery leading to Arbitrary Custom Role Creation/Deletion
Medium
CVE-2022-4010
Image Hover Effects <= 5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
624af5e1-dc40-4d33-bfac-1a409b81a096
SpeakOut! Email Petitions <= 4.0.3 - Reflected Cross-Site Scripting
Medium
1254e0ad-852e-4fd4-8317-61bfbbc9f737
External Links <= 2.55 - Authenticated (Administrator+) Cross-Site Scripting
High
f6c94024-20fb-4cc1-a093-1b9974e61220
Address Autocomplete Using Google Place Api <= 1.0.0 - Cross-Site Request Forgery
Medium
f62063c8-7559-492a-9caf-fae256052d1a
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.8.34 - Missing Authorization to Plugin Deactivation
High
CVE-2022-3861
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2022-3883
StopBadBots <= 7.23 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2022-3881
WP Tools <= 3.42 - Missing Authorization to Select Plugin Installation
Medium
CVE-2022-3879
Car Dealer <= 3.04 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2022-3882
Memory Usage <= 2.45 - Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2022-43468
WordPress Popular Posts <= 6.0.5 - Unauthenticated Views Changes
Medium
CVE-2022-45066
WooSwipe WooCommerce Gallery <= 3.0.2 - Missing Authorization
Medium
CVE-2022-36357
ULTIMATE TABLES <= 1.6.5 - Reflected Cross-Site Scripting
High
CVE-2022-45077
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.