High
32b3ad84-6adb-44c1-942a-51f27638c8c9
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-2532
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
17cb7420-b4e1-4959-beae-d3c0a8c4b1ff
VR Calendar <= 2.3.1 - Reflected Cross-Site Scripting
High
175d8dc0-fc12-464b-b651-50a060851eb2
Trust Payments Gateway (3DS2) <= 1.2.0 - Cross-Site Request Forgery
High
CVE-2022-2541
uContext for Amazon <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-2535
SearchWP Live Ajax Search <= 1.6.1 - Sensitive Information Disclosure
High
CVE-2022-33970
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.1.2 - Authenticated Arbitrary Options Update
High
CVE-2022-33969
Flipbox – Awesomes Flip Boxes Image Overlay <= 2.6.0 - Authenticated (Admin+) Arbitrary Options Update
High
CVE-2022-2354
WP-DBManager <= 2.80.7 - Authenticated (Admin+) Remote Code Execution on Multi-Site
High
CVE-2022-3141
TranslatePress <= 2.3.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-34867
WP Libre Form 2 <= 2.0.8 - Sensitive Information Disclosure
Medium
e532a2b4-0fb4-4256-89a9-435b55d9de91
WordPress Membership, User Registration, Login Form, User Profile & Restrict Content Plugin – ProfilePress <= 3.2.15 - Reflected Cross-Site Scripting
Medium
CVE-2022-25811
Transposh WordPress Translation <= 1.0.9.1 - Authenticated (Admin+) SQL Injection via 'tp_editor'
Medium
CVE-2021-24910
Transposh WordPress Translation <= 1.0.7 - Reflected Cross-Site Scripting via tp_tp
High
CVE-2022-25812
Transposh WordPress Translation <= 1.0.9.1 - Remote Code Execution
Critical
CVE-2022-2314
VR Calendar <= 2.3.1 - Unauthenticated Remote Code Execution
Medium
CVE-2021-24912
Transposh WordPress Translation <= 1.0.9.1 - Cross-Site Request Forgery
Medium
CVE-2021-24911
Transposh WordPress Translation <= 1.0.7 - Unauthenticated Stored Cross-Site Scripting via 'tp_translation'
High
CVE-2022-2518
Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-2515
Simple Banner <= 2.11.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-25810
Transposh WordPress Translation <= 1.0.9.1 - Missing Authorization Checks
Critical
CVE-2022-2180
GREYD.SUITE <= 1.2.6 - Unauthenticated Arbitrary File Upload
Medium
63c1e570-c0de-44e0-ac39-0b9006c43efa
All in One Invite Codes <= 1.0.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2384
Digital Publications by Supsystic <= 1.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.