Medium
CVE-2022-0628
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-25601
Contact Form X <= 2.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-0681
Simple Membership <= 4.0.9 - Cross-Site Request Forgery to Arbitrary Transaction Deletion
Medium
CVE-2022-0750
Photoswipe Masonry Gallery <= 1.2.14 Stored Cross-Site Scripting
Medium
CVE-2022-4932
Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
High
CVE-2022-0687
Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload
Medium
CVE-2022-0627
Amelia <= 1.0.46 - Reflected Cross-Site Scripting
Medium
CVE-2022-4931
BackupWordPress <= 3.12 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2022-0616
Amelia <= 1.0.46 - Cross-Site Request Forgery
Medium
CVE-2022-25600
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.2.3 - Cross-Site Request Forgery
Medium
CVE-2022-25603
MaxGalleria <= 6.2.5 - Stored Cross-Site Scripting
Medium
CVE-2022-0590
BulletProof Security <= 5.7 - Admin+ Stored Cross-Site Scripting
High
5cbf597e-7a2f-416c-8969-3679b487f57a
WooCommerce <= 6.2.0 - Path Traversal via Tax Importer
High
CVE-2021-24905
Advanced Contact form 7 DB <= 1.8.6 - Authenticated Arbitrary File Deletion
Medium
CVE-2022-0775
WooCommerce <= 6.2.0 - Incorrect Authorization Checks on REST API Endpoints
Medium
CVE-2022-0648
Team Circle Image Slider With Lightbox <= 1.0.15 - Reflected Cross-Site Scripting
High
CVE-2022-0478
Event Manager and Tickets Selling for WooCommerce < 3.5.8 - SQL Injection
Medium
CVE-2022-0701
Seo 301 Meta <= 1.9.1 - Stored Cross-Site Scripting
Medium
CVE-2022-0702
Petfinder Listings <= 1.0.19 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0703
GD Mylist <= 1.1.1 - Stored Cross-Site Scripting
Medium
CVE-2022-0684
WP Home Page Menu < 3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2022-0658
CommonsBooking < 2.6.8 - Unauthenticated SQL Injection
Medium
8ea0e5ae-c8b8-4782-a130-e5460a81b066
Hide Admin Bar Based On User Roles < 3.1.0 - Cross-Site Request Forgery
Medium
CVE-2022-0327
Master Addons for Elementor <= 1.8.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.