Medium
CVE-2022-1910
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-1474
WP Event Manager – Easily Build your Calendar of Events! <= 3.1.27 - Stored Cross Site Scripting
High
CVE-2022-31090
Guzzle <= 6.5.7 and 7.0-7.4.4 - Information Exposure
Medium
CVE-2022-2099
WooCommerce <= 6.5.1 - Authenticated (Admin+) HTML Injection
Medium
28d41721-c538-4043-a411-3234ff1074bc
Send PDF for Contact Form 7 <= 0.9.1 - Multiple Cross-Site Scripting
Medium
CVE-2022-33987
got (JS Package) <= 11.8.4 and 12.0-<12.1.0 - Open Redirect
High
d4c5a982-74ba-4a54-8c95-515a628f9c39
FLV Embed <= 1.2.1 - Cross-Site Request Forgery to Options Update
Medium
c8cef103-8b8d-4e9b-9cd2-6e998dcb68dd
Page Link Manager <= 1.0b - Cross-Site Request Forgery to Settings Update
High
b536028d-4e11-4bda-8097-b37857a28309
Thumbnail For Excerpts <= 2.1 - Cross-Site Request Forgery
Medium
af4058cd-79bc-433c-96e1-fb0aad12969c
WP OER <= 0.9.0 - Cross-Site Scripting
Medium
CVE-2022-2117
GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure
Medium
8ad239d3-c761-4c78-903d-119133fcb79b
Special Text Boxes <= 5.9.110 - Cross-Site Scripting
High
69ec31f3-8ec8-40ad-ba7f-77f9132ad51f
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 - Server-Side Request Forgery
Critical
585d0368-7557-46aa-9ea3-26cd6d7df51b
SP Project & Document Manager <= 4.56 - Cross-Site Request Forgery and Cross-Site Scripting
Medium
4a85de70-7cb1-45d1-b872-0677ef8134be
Interactive Medical Drawing of Human Body <= 2.4 - Cross-Site Scripting
Medium
426021d3-e302-4c2a-8d5c-f2a2fc20e45b
WordPress Multisite Content Copier/Updater <= 1.4.0 - Cross-Site Scripting
Medium
410cc5f0-265a-46c1-a334-115142318d10
Hot Linked Image Cacher <= 1.16 - Reflected Cross-Site Scripting
Medium
CVE-2022-32289
Popup Builder <= 4.1.0 - Cross-Site Request Forgery
Medium
1610b3dd-582e-4ff2-956a-95845361c66b
Dyslexiefont Free <= 0.0.2 - Cross-Site Scripting
Medium
CVE-2021-36849
Social Media Share Buttons <= 3.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1546
WooCommerce – Product Importer <= 1.5.2 - Reflected Cross-Site Scripting
High
CVE-2022-1938
Awin Data Feed <= 1.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-2050
WP-Paginate <= 2.1.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1937
Awin Data Feed <= 1.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.