High
CVE-2022-1967
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
b96349da-e2b4-4b29-94b4-1039427bce8e
WooCommerce PDF Invoices & Packing Slips <= 2.14.5 - Cross-Site Scripting
Medium
b0b223e8-7659-4220-acb6-70dfd4c101f4
WooCommerce Menu Cart <= 2.11.0 - Reflected Cross-Site Scripting
High
a9743351-9f28-49bf-8b08-85ffbdcfa5f0
Co-Authors Plus 3.5 - 3.5.1 - Sensitive Information Disclosure
Medium
658ccd08-5f46-4a11-8d86-38b49027f83e
Export any WordPress data to XML/CSV <= 1.3.5 - Reflected Cross-Site Scripting
High
488970f0-3120-4f4a-9915-2ae1708bd86a
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.9 - Cross-Site Request Forgery to Field Import and PHP Object Injection
High
CVE-2022-1751
Skitter Slideshow <= 2.5.2 - Unauthenticated Server-Side Request Forgery
Medium
11177270-cc73-4c65-9f72-8c0a0a89bed5
404 to 301 – Redirect, Log and Notify 404 Errors <= 3.1.1 - Reflected Cross-Site Scripting
Critical
CVE-2022-1593
Site Offline or Coming Soon <= 1.6.6 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
Medium
CVE-2022-1995
miniOrange’s Malware Scanner <= 4.5.5 - Cross-Site Scripting
High
CVE-2022-1960
MyCSS <= 1.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-1971
NextCellent Gallery <= 1.9.35 - Authenticated (Admin+) Cross-Site Scripting
Critical
CVE-2022-1903
ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 3.4.7 -Authentication Bypass via Password Reset Weakness
Medium
961cf553-8871-436d-af95-61af963f5e9d
SAML Single Sign On – SAML SSO Login <= 4.9.20 - Reflected Cross-Site Scripting
Medium
CVE-2022-1028
WordPress Security <= 4.2 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1321
miniOrange's Google Authenticator <= 5.5.5 - Authenticated (Admin+) Cross-Site Scripting
Critical
CVE-2022-0444
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.16 - Unauthenticated Plugin Settings Reset
Medium
7681a661-21bd-42fb-ac97-1da808435520
Qubely <= 1.7.8 - Missing Authorization
Medium
CVE-2022-1994
Login With OTP Over SMS, Email, WhatsApp and Google Authenticator <= 1.0.7 - Cross-Site Scripting
Medium
CVE-2022-1990
Nested Pages <= 3.1.20 - Stored Cross-Site Scripting
Medium
CVE-2022-1010
Login using WordPress Users (WP as SAML IDP) <= 1.13.2 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1029
MiniOrange Limit Login Attempts <= 4.0.72 - Administrator+ Cross-Site Scripting
Medium
354c2c6c-5ba1-4bbe-88e4-9d219b66802a
Modula Image Gallery <= 2.6.6 - Reflected Cross-Site Scripting
Critical
CVE-2022-0875
Login With OTP Over SMS, Email, WhatsApp and Google Authenticator <= 1.0.4 - Cross-Site Request Forgery to Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.