Medium
12ad3c6c-9a01-4801-b754-79e6e1b2d2a3
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-2080
Sensei LMS <= 4.5.1 - Missing Authorization
Medium
CVE-2022-2034
Sensei LMS <= 4.4.3 - Information Disclosure
High
CVE-2022-2657
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Multiple Unprotected AJAX Actions
Medium
332b8d96-89b2-473b-9186-239e49f5b064
Download Manager <= 3.2.53 - Reflected Cross-Site Scripting
Medium
CVE-2022-2537
WooCommerce PDF Invoices & Packing Slips 2.14.0 - 3.0.0 - Reflected Cross-Site Scripting
High
CVE-2022-2261
WPIDE – File Manager & Code Editor <= 2.6 - Authenticated (Admininstrator+) Local File Inclusion
Medium
CVE-2022-2267
Mailchimp for WooCommerce <= 2.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2022-2556
Mailchimp for WooCommerce <= 2.7.1 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2022-2559
Fluent Support <= 1.5.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-38703
MaxButtons <= 9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-36346
WordPress Button Plugin MaxButtons <= 9.2 - Cross-Site Request Forgery
High
CVE-2021-36852
WP Hotel Booking <= 1.10.5 - Cross-Site Request Forgery
Medium
CVE-2022-36371
My Calendar <= 3.3.16 - Open Redirect
High
CVE-2022-2233
Banner Cycler <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2021-36861
Rich Reviews by Starfish <= 1.9.14 - Cross-Site Request Forgery
High
CVE-2022-36288
Download Manager <= 3.2.48 - Cross-Site Request Forgery
Medium
391d65a7-1675-4eae-b129-a1208cd95669
Social Slider Feed <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-34347
Download Manager <= 3.2.48 - Cross-Site Request Forgery to Plugin Settings Update
Critical
CVE-2022-36296
ActiveDEMAND <= 0.2.27 - Missing Authorization Checks
Critical
CVE-2022-34149
WP OAuth Server <= 3.0.4 - Authentication Bypass
Medium
CVE-2022-2362
Download Manager <= 3.2.49 - IP Blocking Bypass
Medium
eb828160-b537-4435-9d85-47e0d70a6704
Remove tabs and fields from WooCommerce <= 1.68 - Reflected Cross-Site Scripting
High
e2e2f446-5391-4189-8c9c-3be2459808d0
Social Slider Feed <= 2.0.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.