High
CVE-2022-1023
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-0471
Favicon by RealFaviconGenerator <= 1.3.22 - Reflected Cross-Site Scripting
High
CVE-2022-25607
FV Flowplayer Video Player <= 7.5.15.727 - SQL Injection
Critical
1f714f97-5e1a-498a-9722-1e4bb883c5c7
Minimist <= 1.2.5 - Prototype Pollution
Medium
CVE-2023-0422
Article Directory <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'publish_terms_text'
Medium
CVE-2022-25602
Responsive Menu <= 4.1.7 - Missing Authorization Checks
High
CVE-2022-0828
Download Manager <= 3.2.38 - Unauthenticated Brute Force of File Master Key
Critical
CVE-2022-0949
WP Block and Stop Bad Bots <= 6.92 - SQL Injection
Medium
CVE-2022-0271
LearnPress <= 4.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-0246
iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
High
CVE-2022-0989
NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality
Medium
CVE-2022-0447
Post Grid < 2.1.16 - Reflected Cross-Site Scripting
Medium
CVE-2021-24986
Post Grid <= 2.1.15 - Cross-Site Scripting
Medium
CVE-2021-24746
Sassy Social Share <= 3.3.39 - Reflected Cross-Site Scripting
Medium
CVE-2021-24987
Social Share, Social Login and Social Comments < 7.13.30 - Reflected Cross-Site Scripting
Medium
CVE-2021-25090
GridKit Portfolio <= 2.0.0 - Subscriber+ Stored Cross-Site Scripting
High
CVE-2021-25048
Page Builder KingComposer <= 2.9.6 - Authenticated Arbitrary Profile Creation and Stored Cross-Site Scripting
Medium
c793d7ad-987f-4b44-92aa-d0fdd66aa537
Members List Plugin <= 4.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-0837
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam
Medium
CVE-2021-25113
Dropdown Menu Widget <= 1.9.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-0537
MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution
Medium
CVE-2022-0958
Mark Posts <= 2.0.0 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0825
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure
High
CVE-2022-0403
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.