Medium
5fdf6407-388c-4fb4-b00d-7ed389a9067d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
38f536ae-70b7-4882-8a61-609d774a68db
Accept Donations with PayPal <= 1.3 - Reflected Cross-Site Scripting via Page
Medium
387515f7-5c03-4902-9671-3ea9f6a1a66b
Easy PayPal Events <= 1.1.6 - Reflected Cross-Site Scripting via Page
Medium
24759d97-2b00-4812-8407-640b545a235a
WordPress to Freshsales Integration <= 1.3.2.2 - Cross-Site Scripting
Medium
231dbf87-2e17-4b4b-9eac-34a8b4a791ba
Elements For Elementor <= 1.9 - Stored Cross-Site Scripting
Medium
db8bebe2-c50c-4148-b232-04bcd808745e
Shapely Companion <= 1.2.6 - Unprotected AJAX Action to Content Import
High
d159130a-c99d-44d3-a130-aa0146f17157
Seamless Donations: A Platform for Global Fundraising and Rebuilding using Stripe and PayPal <= 5.1.12 - Cross-Site Scripting
Medium
CVE-2022-2224
Gallery for Social Photo <= 1.0.0.27 - Cross-Site Request Forgery to Post Duplication
High
9133fa10-036b-4f42-9d0c-8e15d2625f5e
a3rev Multiple Plugins <= Various Versions - Cross-Site Request Forgery to Settings Changes
Medium
CVE-2022-2223
Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication
Medium
CVE-2021-25104
Ocean Extra <= 1.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2021-25121
Rating by BestWebSoft <= 1.5 - Rating Denial of Service
High
2131e418-bd95-4bd1-868f-0bd3b4abdf78
Tainacan <= 0.18.9 - Cross-Site Scripting
High
CVE-2022-1760
Core Control <= 1.2.1 - Cross-Site Request Forgery
Critical
CVE-2022-1781
postTabs <= 2.10.6 - Cross-Site Request Forgery
Medium
CVE-2022-0745
Like Button Rating ♥ LikeBtn <= 2.6.44 - Arbitrary e-mail Sending
Medium
CVE-2022-1756
Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-1724
Simple Membership <= 4.1.0 - Reflected Cross-Site Scripting
Critical
CVE-2022-1780
LaTeX <= 3.4.10 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
High
CVE-2022-1793
Private Files <= 0.40 - Cross-Site Request Forgery to Disable Protection
High
CVE-2022-1779
Auto Delete Posts <= 1.3.0 - Cross-Site Request Forgery to Arbitrary Settings Update
Critical
CVE-2022-0786
KiviCare – Clinic & Patient Management System (EHR) <= 2.3.8 - SQL Injection
High
CVE-2022-1761
Peter’s Collaboration E-mails <= 2.2.0 - Cross-Site Request Forgery
High
CVE-2022-1763
Static Page eXtended <= 2.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.