Critical
CVE-2022-1574
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
95bae3f2-313b-4b6c-a81c-8af6f169151b
Woody code snippets <= 2.4.5 - Reflected Cross-Site Scripting
Medium
7f9b86a3-c68a-443f-a2f3-5f31f3280a6f
ShortPixel Image Optimizer <= 4.22.9 - Reflected Cross-Site Scripting
Medium
CVE-2022-1985
Download Manager <= 3.2.42 - Reflected Cross-Site Scripting
High
CVE-2022-1572
HTML2WP <= 1.0.0 - Arbitrary File Deletion
Medium
6c06b79a-0803-4973-ba88-b97d7145f82b
Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-1977
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery
High
CVE-2022-1573
HTML2WP <= 1.0.0 - Cross-Site Request Forgery
Medium
f708e910-7745-4ff5-9f9f-5552dbaf1113
Elementor Contact Form DB <= 1.5 - Sensitive Information Disclosure
High
CVE-2022-1653
Social Share Buttons by Supsystic <= 2.2.3 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2022-1625
New User Approve <= 2.4 - Cross-Site Request Forgery
Medium
CVE-2022-1953
Product Configurator for WooCommerce <= 1.2.31 - Arbitrary File Deletion
Medium
CVE-2022-1916
Active Products Tables for WooCommerce <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-1964
Easy SVG Support <= 3.2.0 - Cross-Site Scripting via SVG Upload
Medium
CVE-2022-30533
Modern Events Calendar Lite <= 6.2.9 - Authenticated (Contributor+) Cross-Site Scripting
High
CVE-2022-1885
Cimy Header Image Rotator <= 6.1.1 - Cross-Site Request Forgery
Critical
CVE-2022-1913
Add Post URL <= 2.1.0 - Cross-Site Request Forgery
High
1f9d8bbe-205f-44b6-a0c6-89b9135e6363
Contest Gallery – Files Upload and Contest Plugin for WordPress <= 17.0.4 - Admin+ SQL Injection
Medium
fcc96838-dde5-49f2-ac73-977a8347c455
Custom Colors for Real Estate Manager <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2022-1843
MailPress <= 7.2.1 - Cross-Site Request Forgery
Medium
e1fc6a2e-9c91-4517-8f04-fb3ea65413b8
Zengo Custom Thumbnail Image Gallery <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2022-1842
OpenBook Book Data <= 3.5.2 - Cross-Site Request Forgery
Medium
c17c344b-c891-4086-98c8-cea5673173d7
More Featured Images <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
b1c27c27-f597-4867-a8d8-a83a3a1bf5f6
PPC Tracker WordPress <= 2.0 - Stored Cross-Site Scripting via IP
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.