Critical
CVE-2022-1768
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2022-1765
Hot Linked Image Cacher <= 1.16 - Cross-Site Request Forgery
Medium
CVE-2022-0626
Advanced Admin Search <= 1.1.2 - Cross-Site Scripting
Medium
CVE-2022-1772
Google Places Reviews < 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1762
iQ Block Country <= 1.2.13 - Protection Bypass due to IP Spoofing
High
CVE-2022-1694
Useful Banner Manager <= 1.6.1 - Cross-Site Request Forgery
Medium
CVE-2022-29446
Counter Box <= 1.1.1 - Authenticated Local File Inclusion
Medium
CVE-2022-29447
Hover Effects – easily create any hover effect <= 2.1 - Authenticated Local File Inclusion
High
CVE-2022-29448
Herd Effects <= 5.2 - Local File Inclusion
Medium
CVE-2022-1506
//// WP BORN BABIES PLUGIN /// <= 1.0 - Authenticated (Contributor+) Cross-Site Scripting
High
CVE-2022-1422
Discy <= 5.1 - Cross-Site Request Forgery to Settings Reset
Medium
CVE-2022-1241
Ask Me <= 6.8.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-1647
FormCraft Basic <= 1.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-0779
User Meta – User Profile Builder and User management plugin <= 2.4.3 - Path Traversal
Medium
CVE-2022-1469
FiboSearch <= 1.17.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-1424
Ask Me <= 6.8.1 - Cross-Site Request Forgery
Medium
a10da173-9b88-4599-928d-71fc42b35c50
WPify Woo Czech <= 3.5.6 - Reflected Cross-Site Scripting
High
CVE-2022-1421
Discy <= 5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-1541
Video Slider WordPress <= 1.4.6 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1394
Photo Gallery by 10Web <= 1.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-1712
LiveSync for WordPress <= 1.0 - Cross-Site Request Forgery to Arbitrary Settings Update
High
CVE-2022-1709
Throws SPAM Away <= 3.3 - Cross-Site Request Forgery to Comment Modification
Medium
7534f2e5-a296-4c54-99e3-d84f5c9a5b51
WordPress File Upload <= 4.16.3 - Cross-Site Scripting
Medium
CVE-2022-1570
Files Download Delay <= 1.0.6 - Missing Authorization to Settings Reset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.