High
CVE-2022-43481
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-36401
TeraWallet – For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via lock_unlock_terawallet
Medium
CVE-2022-41692
Appointment Hour Booking <= 1.3.71 - Missing Authorization
Medium
CVE-2022-41788
Soledad <= 8.2.5 - Authenticated (Subscriber+) Cross-Site Scripting
Medium
CVE-2022-43482
Appointment Booking Calendar <= 1.3.69 - Missing Authorization
Medium
CVE-2022-43463
Custom Product Tabs for WooCommerce <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3753
Evaluate <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-41831
WP Glossary <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-43459
Forms by CaptainForm <= 2.5.3 - Cross-Site Request Forgery
High
CVE-2022-3383
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Select
Medium
CVE-2022-43492
Comments – wpDiscuz <= 7.4.2 - Insecure Direct Object References
High
CVE-2022-1578
My wpdb <= 1.1.12 - Cross-Site Request Forgery to Arbitrary SQL Query Execution
High
CVE-2022-40687
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Settings Disconnect
High
CVE-2022-3384
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_options
High
CVE-2022-44740
Creative Mail <= 1.5.4 - Cross-Site Request Forgery
Critical
CVE-2022-42497
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary Code Execution
Medium
CVE-2022-43461
Slideshow SE <= 2.5.5 - Authenticated (Subscriber+) Cross-Site Scripting
Medium
CVE-2022-3361
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes
Medium
CVE-2022-3739
WP Best Quiz <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2022-3750
Ask Me < 6.8.7 - Cross-Site Request Forgery
Critical
CVE-2022-42698
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary File Upload
High
CVE-2022-41135
Customizable WordPress Gallery Plugin – Modula Image Gallery <= 2.6.9 - Missing Authorization to Plugin Settings Change
High
CVE-2022-40686
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Plugin Deactivation
Medium
CVE-2022-42494
All in One SEO Pro <= 4.2.5.1 - Authenticated (Admin+) Server Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.