Medium
CVE-2022-0404
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
954b8064-f317-4af4-a55f-9a61ee945006
WordPress Core < 5.9.2 & Gutenberg < 12.7.2 - Prototype Pollution via Block Editor
Medium
0ddb582a-e966-4c0b-a743-29d8943f846b
WordPress Core 5.9 - 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-20083
WordPress Core < 5.9.1 - jQuery Prototype Pollution
Medium
2ed1f200-5a27-4905-ac88-394b214bb430
WooCommerce < 6.3.1 - Unauthorized Order Status Change
High
CVE-2022-0709
Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure
Medium
CVE-2022-0884
Profile Builder <= 3.6.7 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-27855
Fatcat Apps Analytics Cat <= 1.0.9 - Cross-Site Request Forgery
Medium
CVE-2022-0431
Google Pagespeed Insights <= 4.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-0887
Easy Social Icons <= 3.1.3 - Admin+ SQL Injection
Critical
CVE-2021-25070
WP Block and Stop Bad Bots <= 6.88 - SQL Injection
Medium
CVE-2022-0830
FormBuilder <= 1.08 - Cross-Site Request Forgery
High
CVE-2022-0770
Translate WordPress with GTranslate <= 2.9.8 & Translate WordPress – Google Language Translator <= 6.0.13 - Missing Authorization to Sensitive Information Disclosure
High
CVE-2021-25068
Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Authenticated (Admin+) SQL Injection
High
CVE-2021-25064
Wow Countdowns <= 3.1.2 - Authenticated (Admin+) SQL Injection
High
CVE-2022-0595
Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.6.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-0680
Plezi < 1.0.3 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2022-0846
SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQL Injection
Medium
CVE-2022-0833
Church Admin <= 3.4.134 - Cross-Site Request Forgery leading to Plugin Backup Disclosure
Critical
CVE-2022-0479
Popup Builder <= 4.1.0 - SQL Injection
Medium
CVE-2021-25071
Akismet Privacy Policies <= 2.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-0641
Popup Like box <= 3.6.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-0250
Redirection for Contact Form 7 <= 2.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-0450
Menu Image, Icons made easy <= 3.0.7 - Authenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.