High
CVE-2022-3366
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-3440
Rock Convert <= 2.10.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-2627
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Medium
67e3096e-7641-4f95-9e16-c1b45028c7eb
eCommerce Product Catalog Plugin for WordPress <= 3.0.70 - Reflected Cross-Site Scripting
High
CVE-2022-3357
Smart Slider 3 <= 3.5.1.9 - PHP Object Injection
Critical
CVE-2022-3254
AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection
Medium
CVE-2022-2190
Gallery Plugin for WordPress – Envira Photo Gallery <= 1.8.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-3096
WP Total Hacks <= 4.7.2 - Authenticated (Subscriber+) Plugin Options Update to Cross-Site Scripting
Medium
CVE-2022-2167
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Medium
05c4d7e3-f8a8-4c11-b962-38922b0801f9
s2Framework <= 4.1.5 - Reflected Cross-Site Scripting
Medium
e20fe2b7-4396-465e-be41-d4e8a069bb74
Image/Banner Widget <= 1.4.5 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2022-3420
Official Integration for Billingo <= 3.3.9 - Reflected Cross-Site Scripting
Medium
23a2fd80-65cb-4e92-978d-c365f08b4c0b
Subpages Extended <= 1.6.6 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2022-40975
Post Slider <= 1.6.7 - Missing Authorization
Medium
CVE-2022-3408
WP Word Count <= 3.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-40130
WP-Polls <= 2.76.0 - Race Condition
Medium
CVE-2022-3402
Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting
Critical
2637e273-a308-4033-be5a-2f778f8df282
Create Block Theme <= 1.2.1 - Unauthenticated Arbitrary File Upload
Medium
dd108f90-7afc-43e1-86d4-939c1c25fb2d
IP Blacklist Cloud <= 5.00 - Reflected Cross-Site Scripting
Critical
c5c17dea-7b61-4e73-ac61-3fe536c22962
WooCommerce Products Vendor <= 2.1.65 - Unauthenticated SQL Injection
Medium
CVE-2022-36428
Rock Convert <= 2.11.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
a8b0bad8-7ee6-4c7c-95da-7adf37c9cb1f
WooCommerce Products Vendor <= 2.1.68 - Insecure Direct Object Reference to Vendor Commission Percentage Update
Medium
CVE-2022-3392
WP Humans.txt <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
57465fce-e8ad-41ac-9dd6-e340ec314913
WooCommerce Products Vendor <= 2.1.65 - Insecure Direct Object Reference to Note Creation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.