Medium
CVE-2022-37402
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-3691
DeepL Pro API Translation <= 1.7.4 - Sensitive Information Disclosure
Medium
CVE-2022-2696
Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.0 - Missing Authorization on AJAX Actions
High
CVE-2022-43488
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Cross-Site Request Forgery
High
CVE-2022-43481
Advanced Coupons for WooCommerce Coupons <= 4.5 - Cross-Site Request Forgery
High
CVE-2022-36401
TeraWallet – For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via lock_unlock_terawallet
Medium
CVE-2022-41692
Appointment Hour Booking <= 1.3.71 - Missing Authorization
Medium
CVE-2022-41788
Soledad <= 8.2.5 - Authenticated (Subscriber+) Cross-Site Scripting
Medium
CVE-2022-43482
Appointment Booking Calendar <= 1.3.69 - Missing Authorization
Medium
CVE-2022-43463
Custom Product Tabs for WooCommerce <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3753
Evaluate <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-41831
WP Glossary <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-43459
Forms by CaptainForm <= 2.5.3 - Cross-Site Request Forgery
High
CVE-2022-3383
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Select
Medium
CVE-2022-43492
Comments – wpDiscuz <= 7.4.2 - Insecure Direct Object References
High
CVE-2022-1578
My wpdb <= 1.1.12 - Cross-Site Request Forgery to Arbitrary SQL Query Execution
High
CVE-2022-40687
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Settings Disconnect
High
CVE-2022-3384
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_options
High
CVE-2022-44740
Creative Mail <= 1.5.4 - Cross-Site Request Forgery
Critical
CVE-2022-42497
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary Code Execution
Medium
CVE-2022-43461
Slideshow SE <= 2.5.5 - Authenticated (Subscriber+) Cross-Site Scripting
Medium
CVE-2022-3361
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes
Medium
CVE-2022-3739
WP Best Quiz <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2022-3750
Ask Me < 6.8.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.