High
CVE-2022-35277
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-36373
MP3 jPlayer <= 2.7.3 - Cross-Site Request Forgery
Medium
CVE-2022-37330
WHA Crossword <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2935
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL
Medium
CVE-2022-3024
Bitcoin Satoshi Tools <= 1.7.0 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2022-1613
Restricted Site Access <= 7.3.1 - Access Bypass via IP Spoofing
Medium
CVE-2022-36422
WP-PostRatings <= 1.89 - Race Condition
Medium
CVE-2022-3069
Wordlift <= 3.37.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-37404
add2fav <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-36793
WP Shop <= 3.9.6 - Missing Authentication to Settings Change and Order Deletion
Medium
CVE-2022-2936
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link
Medium
4f1cf0f3-faf2-43f7-a641-95bfa5d73ca8
Infinite Scroll – Ajax Load More <= 5.5.4 - Authenticated (Admin+) Arbitrary File Read via Directory Traversal
Medium
CVE-2022-3070
Generate PDF using Contact Form 7 <= 3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-3025
Bitcoin / Altcoin Faucet <= 1.6.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-2937
Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description
Medium
CVE-2022-37403
Add User Role <= 0.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4973
WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function
Medium
300c6ea4-4eed-4be5-abfd-ec4ad9b741d3
WordPress Core < 6.0.2 - Stored Cross-Site Scripting via Plugin Deactivation and Deletion Errors
High
0248f829-84de-40b9-bb63-354fbf06472d
WordPress Core < 6.0.2 - Authenticated SQL Injection
Critical
CVE-2022-2840
Zephyr Project Manager <= 3.2.42 - Unauthenticated SQL Injection
Medium
CVE-2022-2695
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via 'caption'
Medium
af7adacf-7189-401f-b7c9-845eb328ca76
WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2022-1580
Site Offline <= 1.4.9 - Maintenance Mode Bypass
Medium
CVE-2022-3021
Slickr Flickr <= 2.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.