Medium
CVE-2022-50970
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2021-25109
Futurio Extra <= 1.6.2 - Authenticated (Admin+) SQL Injection
Critical
CVE-2022-24664
PHP Everywhere <= 2.0.3 - Authenticated (Contributor+) Remote Code Execution via Metabox
Critical
CVE-2022-24665
PHP Everywhere <= 2.0.3 - Remote Code Execution by Contributor+ users via gutenberg block
Medium
CVE-2021-24937
Asset CleanUp <= 1.3.8.4 - Reflected Cross-Site Scripting
Medium
cc912ace-65d9-4833-a3ad-dc5d37989269
TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Blog Option Update
Medium
CVE-2021-25063
Contact Form 7 Skins <= 2.5.0 - Reflected Cross-Site Scripting
Medium
b6bfe229-88a9-45bf-8321-0afe52797c46
TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Settings Update
Medium
CVE-2021-24686
SVG Support <= 2.3.19 Admin+ Cross-Site Scripting
Medium
CVE-2021-24983
Asset CleanUp <= 1.3.8.4 - Reflected Cross-Site Scripting via AJAX Action
Medium
CVE-2021-25072
NextScripts: Social Networks Auto-Poster <= 4.3.24 - Arbitrary Post Deletion via Cross-Site Request Forgery
Medium
CVE-2021-24934
Visual CSS Style Editor <= 7.5.3 - Reflected Cross-Site Scripting via wyp_page_type parameter
Medium
CVE-2021-24868
Document Embedder <= 1.7.8 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure
Medium
CVE-2021-24975
NextScripts: Social Networks Auto-Poster <= 4.3.23 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24775
Document Embedder < 1.7.6 - Sensitive Data Exposure
High
CVE-2021-25115
WP Photo Album Plus <= 8.0.10 - Stored Cross-Site Scripting
High
CVE-2021-24453
Include Me <= 1.2.1 - Local File Inclusion leading to Authenticated Remote Code Execution
Medium
CVE-2021-24944
Custom Dashboard & Login Page < 6.9.5 - Admin+ Stored Cross-Site Scripting
High
CVE-2021-24919
Wicked Folders <= 2.18.9 - Subscriber+ SQL Injection
Medium
CVE-2021-25092
Link Library <= 7.2.7 - Cross-Site Request Forgery to Library Settings Reset
Medium
CVE-2021-25091
Link Library <= 7.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-25093
Link Library <= 7.2.7 - Missing Authorization Checks
High
CVE-2021-24761
Error Log Viewer by BestWebSoft <= 1.1.1 - Cross-Site Request Forgery
High
CVE-2021-24688
Orange Form <= 1.0.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.