Medium
CVE-2022-2305
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-2325
Invitation Based Registrations <= 2.2.84 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-2435
AnyMind Widget <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-0594
Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic <= 9.7.5 - Information Disclosure
Medium
cf44a96e-0efb-4363-9f49-ba4a82924569
Video Lightbox <= 1.9.5 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-2299
Allow SVG Files <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
a1513296-f7f6-468c-ac96-5f55812d943e
Ivory Search <= 5.4.6 - Reflected Cross-Site Scripting
Medium
752caefe-7e87-4d4f-89e0-fbd28e4076c4
NextScripts: Social Networks Auto-Poster <= 4.3.25 - Reflected Cross-Site Scripting
Medium
0fe5a834-487e-4da8-8b30-384427e26e6b
Booster for WooCommerce <= 5.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2022-2115
Popup Anything – A Marketing Popup and Lead Generation Conversions <= 2.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-2094
Yellow Yard Searchbar <= 2.7.27 - Reflected Cross-Site Scripting
Medium
8b271f2f-d765-4d2d-bb0d-f8425ebc64ca
Photo Gallery by 10Web <= 1.6.8 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-2268
WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload
Medium
037882e8-4d66-47b9-8ca5-3fa3866b9125
ND Shortcodes <= 6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-29495
Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.1.11 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2022-33198
Accordions – Multiple Accordions or FAQs Builder <= 2.0.2 - Unauthenticated Arbitrary Options Update
Medium
CVE-2022-1326
Form – Contact Form <= 1.2.0 - Administrator+ Cross-Site Scripting
Medium
CVE-2022-2189
WP Video Lightbox <= 1.9.4 - Reflected Cross-Site Scripting
Medium
a626dfd4-d8c3-4cd1-a624-bae719bea93a
Music Player for WooCommerce <= 1.0.172 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-1565
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload
Critical
CVE-2022-34487
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.0.2 - Unauthenticated Arbitrary Options Update
High
CVE-2022-2241
Featured Image from URL (FIFU) <= 3.9.9 - Cross-Site Request Forgery
High
CVE-2022-2184
CAPTCHA 4WP <= 7.0.6.1 - Cross-Site Request Forgery to Local File Inclusion
Medium
db2a0b6f-5629-4ebe-8431-ebb3bc583e31
WordPress Popular Posts <= 5.5.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.