High
CVE-2022-40671
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-29489
Sucuri Security <= 1.8.33 - Cross-Site Request Forgery
Medium
CVE-2022-2823
Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin <= 3.27.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2021-25044
Cryptocurrency Pricing list and Ticker <= 1.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-38460
NOTICE BOARD <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2891
WP 2FA <= 2.2.1 - Time-Based TOTP attack to Sensitive Information Exposure
High
CVE-2022-38073
Awesome Support <= 6.0.7 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-3209
Soledad <= 8.2.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-3194
Dokan <= 3.6.3 - Authenticated (Vendor+) Stored Cross-Site Scripting
Critical
CVE-2022-3180
WPGateway <= 3.5 - Unauthenticated Privilege Escalation
High
CVE-2022-36388
YDS Support Ticket System <= 1.0 - Cross-Site Request Forgery
High
CVE-2022-38095
Advanced Dynamic Pricing for WooCommerce <= 4.1.3 - Cross-Site Request Forgery to Plugin Settings Update
High
CVE-2022-38085
Read more By Adam <= 1.1.8 - Cross-Site Request Forgery
Medium
CVE-2022-38135
Photospace Gallery <= 2.3.5 - Missing Authorization to Plugin Settings Update
Medium
CVE-2022-40195
PCA Predict <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-37342
Add Shortcodes Actions And Filters <= 2.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-2628
DSGVO All in one for WP <= 4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-38139
RD Station <= 5.2.0 - Cross-Site Request Forgery to Plugin Settings Update
High
CVE-2022-3427
Corner Ad <= 1.0.56 - Cross-Site Request Forgery
Medium
0004db27-9ea6-4387-ab1d-b95558784ed9
We’re Open! <= 1.37 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-40191
Contact Form By Mega Forms <= 1.2.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-40632
wpForo Forum <= 2.0.5 - Cross-Site Request Forgery
High
CVE-2022-2839
Zephyr Project Manager < 3.2.55 - Missing Authorization to Cross-Site Scripting
High
42f54887-ce98-4360-8d07-37b1a48fc3fd
WP Statistics <= 13.2.5 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.