Medium
CVE-2022-1113
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-29432
wpDataTables <= 2.1.27 - Authenticated Cross-Site Scripting
High
CVE-2022-29431
Remove CPT base <= 5.8 - Cross-Site Request Forgery to CPT base deletion
High
CVE-2022-29430
PNG to JPG <= 5.8 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Medium
CVE-2022-1527
WP 2FA – Two-factor authentication for WordPress <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4905
WP-Stateless – Google Cloud Storage <= 3.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-29429
Code Snippets Extended <= 1.4.7 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2022-29428
WP Slider Plugin <= 1.4.5 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-29427
Disable Right Click For WP <= 1.1.6 - Cross-Site Request Forgery
Medium
CVE-2021-36912
Andrea Pernici News Sitemap for Google <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-29426
Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting
Medium
CVE-2022-29425
Checkout Files Upload for WooCommerce <= 2.1.2 - Cross-Site Scripting
Medium
CVE-2022-29424
Image Hover Effects Ultimate <= 9.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-1456
Poll Maker <= 4.0.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1528
VikBooking <= 1.5.8 - Reflected Cross-Site Scripting
Medium
CVE-2022-1562
Enable SVG <= 1.3.1 - Cross-Site Scripting via SVG
Medium
CVE-2022-1009
Smush – Lazy Load Images, Optimize & Compress Images <= 3.9.8 - Cross-Site Scripting
High
517653e5-fdad-4360-82a5-32b16a6cd631
OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) <= 3.0.1 - Cross-Site Scripting
High
CVE-2022-1203
Content Mask <= 1.8.4 - Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2022-1567
WP JS <= 2.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-36844
WP Subscribe <= 1.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-29444
Breeze – WordPress Cache Plugin <= 2.0.2 - Unprotected AJAX Actions
Critical
CVE-2022-0781
Nirweb support <= 2.7.9 - SQL Injection
Medium
CVE-2022-1298
Tabs Responsive <= 2.2.7 - Editor+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.