Medium
CVE-2022-46822
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-46800
LiteSpeed Cache <= 5.3 - Missing Authorization to Toggle Crawler State
Medium
cf13732b-7c24-443a-bae9-d8cf70b5cb33
Stock Sync for WooCommerce <= 2.3.2 - Cross-Site Request Forgery
Medium
CVE-2023-28619
Resoto <= 1.0.8 - Missing Authorization leading to Authenticated (Subscriber+) Arbitrary Plugin Activation
Medium
CVE-2022-46793
Product Feed PRO for WooCommerce <= 12.4.0 - Cross-Site Request Forgery via update_project
Medium
CVE-2023-0367
Pricing Tables For WPBakery Page Builder (formerly Visual Composer) <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-46807
Stock Sync for WooCommerce <= 2.3.2 - Missing Authorization
Medium
CVE-2023-28696
I Recommend This <= 3.9.0 - Cross-Site Request Forgery
Medium
CVE-2023-1373
W4 Post List <= 2.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-45348
amr users <= 4.59.4 - Authenticated (Subscriber+) CSV Injection
Medium
CVE-2023-28747
CBX Currency Converter <= 3.0.3 - Cross-Site Request Forgery leading to Plugin Settings Leakage/Changes
Medium
CVE-2023-1413
WP VR <= 8.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-28688
TH Variation Swatches <= 1.2.7 - Cross-Site Request Forgery via delete_settings
Medium
CVE-2023-0374
W4 Post List <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Options
Medium
CVE-2022-43472
eRoom – Zoom Meetings & Webinar <= 1.4.6 - Missing Authorization via stm_wpcfto_get_settings_callback
Medium
CVE-2023-1371
W4 Post List <= 2.4.5 - Information Disclosure via post_excerpt
Medium
CVE-2022-41698
If Menu <= 0.16.3 - Missing Authorization to Admin Settings Modification
Medium
CVE-2022-44578
Owl Carousel <= 0.5.3 - Missing Authorization via save_paramter.php
High
CVE-2023-1274
Pricing Tables For WPBakery Page Builder (formerly Visual Composer) <= 2.0 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
Medium
20daf751-176d-48f2-ac68-480fda89cee1
WordPress Pinterest Plugin <= 1.6.1 - Stored (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2023-28694
Wbcom Designs – BuddyPress Activity Social Share <= 3.5.0 - Cross-Site Request Forgery
Medium
CVE-2023-25969
Multiple Plugins By ThemeHunk (Various Versions) - Missing Authorization via settings_init
High
CVE-2023-28659
Waiting: One-click countdowns <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'pbc_down[meta][id]'
Medium
CVE-2022-46804
Export Users Data Distinct <= 1.3 - Authenticated (Subscriber+) CSV Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.