Critical
CVE-2022-0513
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2021-4134
Fancy Product Designer <= 4.7.4 - Admin+ SQL Injection
High
CVE-2022-0440
Catch Themes Demo Import <= 2.1 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2022-0267
AdRotate – Ad manager & AdSense Ads <= 5.8.17 - Admin+ SQL Injection
Medium
d3c4b62b-c8b1-40b8-b250-d9da94208c62
EasyJobs <= 1.4.7 - Reflected Cross-Site Scripting
Medium
CVE-2021-24953
Advanced iFrame <= 2021.9 Reflected Cross-Site Scripting
Medium
CVE-2021-24824
Custom Content Shortcode <= 3.8.8 - Unauthorised Arbitrary Post Metadata Access
Critical
CVE-2022-0434
Page Views Count Plugin <= 2.4.14 - Unauthenticated SQL Injection
Medium
CVE-2022-0426
Product Feed PRO for WooCommerce <= 11.2.1 - Reflected Cross-Site Scripting
High
CVE-2021-24959
WP Email Users <= 1.7.6 - SQL Injection
Medium
CVE-2022-0345
Better Notifications for WP <= 1.8.6 - Email Address Disclosure
Medium
CVE-2021-25042
WP Visitor Statistics (Real Time Traffic) <= 5.4 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2021-24814
WordPress GDPR & CCPA < 1.9.26 - Reflected Cross-Site Scripting
Medium
CVE-2022-0189
WP RSS Aggregator <= 4.19.3 - Reflected Cross-Site Scripting
High
CVE-2021-24897
Add Subtitle <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-0220
WordPress GDPR & CCPA <= 1.9.26 Reflected Cross-Site Scripting
Medium
CVE-2022-0377
LearnPress <= 4.1.4.1 - Arbitrary Image Renaming
Medium
CVE-2021-24971
WP Responsive Menu <= 3.1.7 - Missing Authorization to Settings Update & Stored Cross-Site Scripting
Medium
CVE-2022-0164
Coming soon and Maintenance mode <= 3.6.6 - Missing Authorization to Arbitrary Email Send
Medium
CVE-2021-25101
Anti-Malware Security and Brute-Force Firewall <= 4.20.93 - Reflected Cross-Site Scripting
High
CVE-2022-0199
Coming soon and Maintenance mode <= 3.6.7 - Cross-Site request Forgery to Arbitrary Email Send
Medium
CVE-2022-0234
WOOCS <= 1.3.7.4 - Reflected Cross-Site Scripting via AJAX action
Medium
CVE-2022-0279
AnyComment <= 0.2.17 - Race Condition
High
CVE-2022-0218
WP HTML Mail <= 3.0.9 - Missing Authorization on Rest Route
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.