Medium
CVE-2018-5158
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-29433
Donations <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-43307
semver-regex <= 3.1.3 and 4.0.0-4.0.3 - Regular Expression Denial of Service (ReDoS)
Medium
CVE-2022-29923
Quick Restaurant Reservations <= 1.4.1 - Reflected Cross-Site Scripting
High
79a41b84-2e19-46eb-9f6b-5155da0b15cc
Google Tag Manager for WordPress <= 1.15 - Cross-Site Scripting via Cloudflare Country Code
Medium
CVE-2022-45084
Loginizer <= 1.7.5 - Reflected Cross-Site Scripting via 'name'
Medium
CVE-2022-1569
WordPress Forms by Pie Forms <= 1.4.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-1695
WP Simple Adsense Insertion <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2022-1005
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting
Critical
CVE-2022-0788
WP Fundraising Donation and Crowdfunding Platform <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2022-1673
WooCommerce Green Wallet Gateway <= 1.0.1 - Reflected Cross-Site Scripting
High
CVE-2022-1577
Database Backup for WordPress <= 2.5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-1395
Easy FAQ with Expanding Text <= 3.2.8.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1597
WPQA - Builder forms Addon For WordPress <= 5.3 - Reflected Cross-Site Scripting
Medium
58884dcb-dad3-4856-aa54-c5b769d4f9e1
Use Any Font | Custom Font Uploader <= 6.2.7 - Cross-Site Scripting
High
28bdad82-f09a-461f-b826-3f458f121fea
Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam <= 2.0.0 - Cross-Site Scripting
Medium
CVE-2022-1566
Quotes llama <= 0.7 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1598
WPQA - Builder forms Addon For WordPress <= 5.4 - Unauthenticated Private Message Disclosure
High
CVE-2022-1611
Bulk Page Creator <= 1.1.3 - Cross-Site Request Forgery to Arbitrary Page Creation
High
CVE-2022-1689
Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via Update
Medium
CVE-2022-1645
Amazon Link <= 3.2.10 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1646
Simple Real Estate Pack <= 1.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1542
hpb Dashboard <= 1.3.1 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1275
BannerMan <= 0.2.4 - Authenticated (Admin+) Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.