High
CVE-2022-3243
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-3208
Simple File List <= 4.4.12 - Cross-Site Request Forgery to Page Creation
Medium
CVE-2022-3207
Simple File List <= 4.4.11 - Reflected Cross-Site Scripting
Medium
a2ad2c0d-542e-4b40-91a8-19b27297545e
Contact Form by WPForms <= 1.7.5.3 - Authenticated (Administrator+) Arbitrary File Access via Path Traversal
Medium
CVE-2022-2448
reSmush.it Image Optimizer <= 0.4.5 - Authenticated (Administrator+) Cross-Site Scripting
Medium
80192348-dcf4-4bab-80d1-ae7a4d194270
Breeze <= 2.0.8 - Cross-Site Request Forgery via import_json_settings
Medium
CVE-2022-2981
Download Monitor <= 4.5.97 - Authenticated (Administrator+) Arbitrary File Download
Medium
CVE-2022-2944
WordPress Countdown Widget <= 3.1.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3136
Social Rocket <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
48784892-443f-452c-9fe9-12e73af1cf7f
Booster for WooCommerce (Free <= 5.6.2 and Premium <= 5.6.0) - Authenticated (Subscriber+) Order Modification
High
01aa00db-43e5-4c8a-a005-77a39ec89c94
MemberPress Downloads <= 1.2.5 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2022-3609
GetYourGuide Ticketing <= 1.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
546d4f19-0e6f-447b-95c9-d86291477c80
Database Browser <= 1.4.4 - Authenticated (Administrator+) Cross-Site Scripting
Medium
52a03c45-1d65-43aa-b30f-13698019e05f
miniOrange's Google Authenticator <= 5.5.82 - Missing Authorization
Medium
CVE-2022-3220
Advanced Comment Form <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-40193
Awesome Filterable Portfolio <= 1.9.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-40672
CPO Shortcodes <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-35238
Awesome Filterable Portfolio <= 1.9.7 - Missing Authorization to Plugin Settings Change
Medium
CVE-2022-40213
GS Testimonial Slider <= 1.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2022-3227
SearchWP Live Ajax Search <= 1.6.2 - Directory Traversal and Local File Inclusion
Medium
CVE-2022-3137
Taskbuilder <= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-3154
Multiple Plugins from Viszt Peter - Cross-Site Request Forgery
Medium
CVE-2022-2554
Enable Media Replace <= 3.6.3 - Authenticated (Administrator+) Path Traversal
Medium
CVE-2022-2350
Disable User Login <= 1.0.1 - Missing Authorization to Unauthenticated Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.