Critical
CVE-2022-42698
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2022-41135
Customizable WordPress Gallery Plugin – Modula Image Gallery <= 2.6.9 - Missing Authorization to Plugin Settings Change
High
CVE-2022-40686
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Plugin Deactivation
Medium
CVE-2022-42494
All in One SEO Pro <= 4.2.5.1 - Authenticated (Admin+) Server Side Request Forgery
Medium
CVE-2022-2445
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2022-41554
Slideshow SE <= 2.5.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-43471
WP Bootstrap Gallery <= 1.1 - Missing Authorization
Medium
CVE-2021-36858
Testimonials <= 2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
c3172e21-c2e4-4ec0-ad0f-4433303efcfb
Syncee for Suppliers <= 1.0.5 - Missing Authorization to Sensitive Information Disclosure
Medium
CVE-2022-3762
Booster Elite for WooCommerce < 1.1.7 - Authenticated (Admin/Shop Manager+) Arbitrary File Download
High
CVE-2022-41978
Zoho CRM Lead Magnet <= 1.7.5.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2022-3618
Spacer <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-42485
Gallery with thumbnail slider <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-38971
BuddyForms <= 2.7.2 - Authenticated (Contributor+) Stored Stored Cross-Site Scripting
Medium
CVE-2022-34148
Backup Guard <= 1.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-3634
Contact Form 7 Database Addon <= 1.2.6.3 - CSV Injection
Medium
CVE-2022-3694
Syncee – Global Dropshipping <= 1.0.9 - Missing Authorization.
High
CVE-2022-41805
Booster for WooCommerce <= 5.6.6 - Cross-Site Request Forgery
Medium
CVE-2022-36352
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 5.0.3 - Missing Authorization to Information Exposure
High
CVE-2022-3336
Event Monster – Event Management, Tickets Booking, Upcoming Event <= 1.1.20 - Cross-Site Request Forgery
High
CVE-2022-2449
reSmush.it Image Optimizer <= 0.4.6 - Cross-Site Request Forgery
Critical
CVE-2022-3708
Web Stories <= 1.24.0 - Server Side Request Forgery
High
CVE-2022-43491
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Cross-Site Request Forgery
High
CVE-2022-40695
SEO Redirection Plugin <= 8.9 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.