Medium
7c6b7dca-dd82-45b4-b9e2-0b44201396e9
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2023-0150
Cloak Front End Email <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4489
HUSKY – Products Filter for WooCommerce Professional <= 1.3.1 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-4700
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation
Medium
CVE-2022-4702
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation
Medium
130c3bbf-19a9-4e11-b6f2-5a08bbf7b123
Mega Main Menu <= 2.2.2 - Information Disclosure
High
79ef7b33-ea6b-4cf2-bed4-8177927ab650
WPDating <= 7.4.1 - Arbitrary File Upload
Critical
CVE-2023-0556
ContentStudio <= 1.2.5 - Missing Authorization
Medium
CVE-2022-4831
Custom User Profile Fields <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4794
Amazon Affiliate <= 3.12.2 - Reflected File Download
Medium
b6bff35f-f881-4c60-9611-4a04727bac36
WooCommerce Eway Gateway <= 3.5.0 - Insecure Direct Object Reference
Critical
CVE-2022-4872
WooCommerce Chained Products < 2.12.0 - Missing Authorization to Arbitrary Options Update
Medium
CVE-2022-4680
Revive Old Posts <= 9.0.10 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-47440
My Tickets <= 1.9.10 - Cross-Site Request Forgery
Medium
462372ab-8f83-4b75-b3dd-674199e1eeee
Mailjet Email Marketing <= 5.3 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2022-4323
Google Analyticator <= 6.5.5 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2022-0316
Themes from Chimpstudio and Pixfill (Various Versions) - Unauthenticated Arbitrary File Upload
Critical
CVE-2022-4693
User Verification <= 1.0.93 - Privilege Escalation
Medium
CVE-2022-4548
Optimize images ALT Text <= 2.0.7 - Cross-Site Request Forgery
Medium
CVE-2022-4650
HashBar – WordPress Notification Bar <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4303
WP Limit Login Attempts <= 2.6.4 - IP Spoofing to Protection Mechanism Bypass
High
CVE-2022-3425
Google Analyticator <= 6.5.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4718
Landing Page Builder <= 1.4.9.8.9 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2023-4000
Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.