Medium
CVE-2022-3026
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-2934
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Image URL
High
7082c181-88c7-40f0-b49c-ffc16ab41dcc
Zephyr Project Manager <= 3.2.42 - Missing Authorization to Cross-Site Scripting
Medium
CVE-2022-3036
Gettext override translations <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-2430
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block'
Medium
CVE-2022-2517
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Caption - On Hover
Medium
2ff83bf5-369f-43b9-b073-daf0de9051c7
Zephyr Project Manager <= 3.2.42 - Reflected Cross-Site Scripting
Medium
CVE-2022-2516
Visual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title'
Medium
CVE-2022-2429
Ultimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection
Medium
CVE-2022-2567
Form Builder CP <= 1.2.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-2716
Beaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Text Editor
Medium
CVE-2022-37412
Better Delete Revision <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3062
Simple File List <= 4.4.11 - Reflected Cross-Site Scripting
Medium
1575e301-a26f-485e-bdf3-526b71c8306a
Better Font Awesome <= 2.0.1 - Missing Authorization to Plugin Options Update
Critical
dbda16f5-65c2-47cf-8b06-6aa231b8fd11
Alphabetic Pagination <= 3.0.7 - Missing Authorization to Unauthenticated Arbitrary Options Update
High
CVE-2022-36387
About Me <= 1.0.12 - Missing Authorization
High
CVE-2022-36427
About Rentals <= 1.5 - Missing Authorization
Medium
CVE-2022-38067
Event Calendar <= 1.4.6 - Missing Authorization to Event Modification
Medium
CVE-2021-36829
Launcher: Coming Soon & Maintenance Mode <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-37344
Accommodation System <= 1.0.1 - Missing Authorization
Medium
CVE-2022-34656
Poll, Survey, Questionnaire and Voting system <= 1.7.4 - Authenticated (Administrator+) Cross-Site Scripting
High
CVE-2022-36358
SEO Scout <= 0.9.83 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-36390
Event Calendar <= 1.4.6 - Reflected Cross-Site Scripting
Medium
3a0d85e8-33fa-46eb-b71b-d93715bc373e
WPtouch <= 4.3.42 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.