Medium
CVE-2022-2108
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-1732
Rename wp-login.php <= 2.6.0 - Cross-Site Request Forgery & Unauthenticated Settings Change
Medium
01857d1d-4b6c-4ab0-b2ef-6a948daedbe0
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.6.1 - Cross-Site Scripting
Medium
CVE-2021-36891
Photo Gallery by Supsystic <= 1.15.5 - Cross-Site Request Forgery to Plugin Settings Change
Medium
fe4171b9-b17e-4e6e-9ab4-4b1b125e8950
Lana Email Tester <= 1.0.0 - Missing Authorization to Mail Relay & Cross-Site Request Forgery
Medium
e702675c-b3ec-458b-a382-cba5c03879c2
OnePress Opt-In Panda <= 2.6.2 - Missing Authorization on AJAX Actions
Critical
df46b3d5-a433-47b5-99b8-117591f7dd16
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.10 - Code Injection
Critical
d7f024c5-80d8-490f-b448-9bccb877024b
Premium Courses & eLearning <= 1.0.5 - SQL Injection
High
19bd105a-823d-4a85-87e1-54291274a842
Export to Text <= 2.4 - Unauthenticated Post Export
High
CVE-2022-1626
Sharebar <= 1.4.1 - Cross-Site Request Forgery to Settings Update & Cross-Site Scripting
High
CVE-2022-1757
pagebar <= 2.65 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
Medium
CVE-2022-28612
Popup | Custom Popup Builder <= 1.3.1 - Missing Capabilities Check
Medium
CVE-2022-32280
XO Slider <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-29406
WordPress Team Manager <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-27859
Travel Management <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
f5500911-52cf-43b5-a15e-e8db5bedd5af
Real Cookie Banner <= 2.18.1 - Reflected Cross-Site Scripting
Medium
ca203777-84ea-47ab-bafc-f2cc8f778fcd
LearnPress – WordPress LMS Plugin <= 4.1.6.5 - Reflected Cross-Site Scripting
Medium
b489427e-f925-4058-8924-7a9557fc4ebf
Gravity PDF <= 6.3.0 - Reflected Cross-Site Scripting
Medium
86f3c549-2cdd-4294-bc62-0892e94ddbb7
Qubely <= 1.7.9 - Incorrect Authorization
Medium
42f537db-cb30-4ac6-9cc5-835901a722be
Clearfy Cache <= 2.0.4 - Reflected Cross-Site Scripting
Medium
3363149f-a522-49a1-94c8-a3bcd865f911
Table Rate Shipping Method for WooCommerce by Flexible Shipping <= 4.11.8 - Reflected Cross-Site Scripting
Medium
33512495-91d6-4efe-9c76-484ab07874f6
Easy Testimonials <= 3.8 - Reflected Cross-Site Scripting
Medium
11aec50c-2531-4d30-92da-8513fdca741e
Checkout Fields Manager for WooCommerce <= 5.5.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-29455
Elementor Website Builder <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.