Medium
7dfa84ed-0edf-4a75-8ec3-986c3880353c
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-1153
LayerSlider <= 7.1.1 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-0780
SearchIQ – The Search Solution <= 3.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-1239
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 8.8.13 - Server Side Request Forgery
High
CVE-2022-1281
Photo Gallery by 10Web <= 1.6.2 - SQL Injection
Medium
CVE-2022-1054
RSVP and Event Management <= 2.7.7 - Unauthenticated Sensitive Information Disclosure
Critical
CVE-2022-0693
Master Elements <= 8.0 - Unauthenticated SQL injection
Medium
CVE-2022-0662
AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Advert Names
Medium
CVE-2022-1255
Import and export users and customers <= 1.19.2 - Stored Cross-Site Scripting
Medium
CVE-2021-25120
Easy Social Feed <= 6.2.6 - Reflected Cross-Site Scripting
High
CVE-2022-1273
Import WP – Import and Export WordPress data to XML or CSV files <= 2.4.5 - Authenticated Arbitrary File Upload
Medium
CVE-2022-0649
AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Group Names
Medium
7c32d967-85b9-4c93-a948-0126efb78f39
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Information Disclosure
Medium
CVE-2022-0398
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Subscriber+ Arbitrary Affiliate Links Creation
Medium
CVE-2022-0634
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery
Medium
CVE-2022-1228
Opensea <= 1.0.2 - Cross-Site Scripting
Medium
CVE-2022-0876
Social comments by WpDevArt <= 2.4.9 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1063
Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1027
Page Restriction WordPress <= 1.2.6 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1152
Menubar <= 5.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-46781
Coming Soon by Supsystic <= 1.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-0737
Text Hover <= 4.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-46782
Pricing Table by Supsystic <= 1.9.4 - Reflected Cross-Site Scripting
High
CVE-2022-0707
Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.