High
CVE-2022-2987
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2021-24890
Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-2926
Download Manager <= 3.2.54 - Authenticated (Admin+) Path Traversal
Medium
CVE-2022-1579
Login Block IPs <= 1.0.0 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-38058
WP Shamsi <= 4.1.1 - Missing Authorization to Plugin Settings Update
Medium
CVE-2022-3074
Slider Hero <= 8.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3135
SEO Smart Links <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-1755
SVG Support <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2022-3076
CM Download Manager <= 2.8.5 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2022-37339
Meet My Team <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-38070
Pop-up <= 1.1.5 - Privilege Escalation
High
CVE-2022-41840
Welcart e-Commerce 2.6.0-2.7.7 - Information Disclosure via Arbitrary File Read
Medium
CVE-2022-37328
History Timeline <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2022-36798
Mega Addons For WPBakery Page Builder <= 4.2.7 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-36791
Torro Forms <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2939
WP Cerber Security <= 9.0 - User Enumeration Bypass
Medium
CVE-2022-36365
WHA Crossword <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-36383
Word Search Puzzles game <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-37335
Word Search Puzzles game <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-37338
Blossom Recipe Maker <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-37411
Captcha Code <= 2.7 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2022-36796
CallRail Phone Call Tracking <= 0.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-36355
Easy Org Chart <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-40310
Rate my Post – WP Rating System <= 3.3.4 - Race Condition
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.