Medium
CVE-2023-24375
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-36340
MailOptin <= 1.2.49.0 - Missing Authorization to Cache Deletion
Medium
CVE-2022-38061
Export Post Info <= 1.2.0 - Authenticated (Author+) CSV Injection
High
CVE-2022-40215
Tabs <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-36417
3D Tag Cloud <= 3.8 - Cross-Site Request Forgery
Medium
CVE-2022-38134
Customer Reviews for WooCommerce <= 5.3.5 - Multiple Unprotected AJAX Actions
Medium
CVE-2022-38470
Customer Reviews for WooCommerce <= 5.3.5 - Cross-Site Request Forgery
Medium
CVE-2022-40194
Customer Reviews for WooCommerce <= 5.3.5 - Sensitive Data Exposure
Medium
CVE-2022-3082
miniOrange Discord Integration <= 2.1.5 - Missing Authorization to Plugin Options Update
High
CVE-2022-41996
Avada <= 7.8.1 - Cross-Site Request Forgery
High
CVE-2022-3150
WP Custom Cursors <= 3.0.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-3206
Passster <= 3.5.5.5.1 - Insecure Password Storage to Sensitive Data Exposure
Medium
66b6443a-3bd0-4f45-8ad3-424d11ec24e1
No Page Comment <= 1.1 - Reflected Cross-Site Scripting
High
CVE-2022-40219
FavIcon Switcher <= 1.2.11 - Cross-Site Request Forgery
Medium
CVE-2022-3149
WP Custom Cursors <= 3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-3151
WP Custom Cursors <= 3.0 - Cross-Site Request Forgery to Cursor Manipulation
Medium
CVE-2022-41619
Image Zoom <= 1.8.8 - Missing Authorization
High
CVE-2022-2864
demon image annotation <= 4.7 - Cross-Site Request Forgery to Cross-Site Scripting
High
e2389b9c-c766-4cb7-83d6-b0ad7d2a075e
No Page Comment <= 1.1 - Cross-Site-Request Forgery to Settings Change
Medium
cbdb3be2-50c5-4516-bce1-8785e338fe5c
Tidio – Live Chat, Chatbots & Email Integration <= 5.2.0 - Sensitive Information Disclosure
Medium
CVE-2022-3244
WP Ultimate CSV Importer <= 6.5.7 - Missing Authorization
High
CVE-2022-3131
Search Logger <= 0.9 - Authenticated (Administrator+) SQL Injection
High
537bdd21-7ebd-4c17-a681-18703ac973a5
Image Zoom <= 1.8.8 - Cross-Site Request Forgery
Medium
CVE-2022-3139
We’re Open! <= 1.41 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.