Medium
CVE-2022-2425
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-2426
Thinkific Uploader <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
801132f5-e4ea-4d56-8429-9f33896f6dff
My Calendar <= 3.3.16 - Administrator+ Stored Cross-Site Scripting
Critical
CVE-2022-2460
WPDating <= 7.4.0 - SQL Injection
Medium
CVE-2022-2410
mTouch Quiz <= 3.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-34839
WP OAuth2 Server <= 1.0.1 - Authentication Bypass
High
CVE-2022-33901
MultiSafepay plugin for WooCommerce <= 4.15.0 - Arbitrary File Read
High
CVE-2022-2438
Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2022-2411
Auto More Tag <= 4.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2461
Transposh WordPress Translation <= 1.0.9.6 - Unauthorized Settings Change
Medium
CVE-2022-2386
Crowdsignal Dashboard – Polls, Surveys & more <= 3.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2022-2424
Google Maps Anywhere <= 1.2.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2372
YaySMTP – Simple WP SMTP Mail <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
a57675f0-d840-4954-b86e-a9fbc1483bc7
Name Directory <= 1.25.4 - Unauthorized Settings Update
Critical
54901d01-241a-4027-ba72-2b983608f9c6
Advanced Post Manager <= 4.5.1 - PHP Object Injection
Medium
45f32160-36eb-4d66-a6a6-a3d6f2f7bf1a
Ultimate Member <= 2.4.0 - Subscriber+ Stored Cross-Site Scripting
Medium
CVE-2022-2389
Abandoned Cart Recovery for WooCommerce by Autonami <= 2.1.1 - Missing Authorization
High
f4832fbb-94ed-41c4-8434-1972f4d92476
Ultimate Member <= 2.4.1 - Username Enumeration
Medium
CVE-2022-2398
WordPress Comments Fields <= 4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2594
Advanced Custom Fields <= 5.12.2 - File Upload
Low
CVE-2022-25858
terser (JS Package) < 5.14.2 - Denial of Service
Critical
CVE-2022-1950
Youzify <= 1.1.9 - SQL Injection
High
CVE-2022-2269
Website File Changes Monitor <= 1.8.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-31475
GiveWP <= 2.20.2 - Authenticated Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.