High
CVE-2022-23532
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-3143
Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator
Critical
CVE-2022-21191
global-modules-path Command Injection vulnerability
High
CVE-2023-22678
Superior FAQ <= 1.0.2 - Cross Site Request Forgery
Medium
CVE-2023-0282
YourChannel <= 1.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'yrc_lang[Videos]'
Medium
CVE-2022-47609
DNUI <= 2.8.1 - Cross-Site Request Forgery leading to Unused Image Deletion and Database Image Access
Medium
CVE-2023-0082
ExactMetrics <= 7.12.0 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-4762
Materialis Companion <= 1.3.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-22681
eExamhall <= 4.0 - Cross Site Request Forgery
Medium
CVE-2022-47435
WP-OliveCart <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-22679
WP Better Emails <= 0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0295
Launchpad – Coming Soon & Maintenance Mode Plugin <= 1.0.13 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2023-22680
No API Amazon Affiliate <= 4.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-47142
Mediamatic – Media Library Folders <= 2.8.1 - Cross-Site Request Forgery
High
CVE-2022-46867
Universal Star Rating <= 2.1.0 - Cross-Site Request Forgery
Medium
CVE-2023-0096
Happyforms <= 1.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blocks
Medium
CVE-2022-47591
Map Multi Marker <= 3.2.1 - Reflected Cross-Site Scripting
High
CVE-2022-47147
ipBlockList <= 1.0 - Cross Site Request Forgery
High
CVE-2022-47611
Hover Image <= 1.4.1 - Cross-Site Request Forgery
Medium
CVE-2023-0081
MonsterInsights <= 8.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-0234
SiteGround Security <= 1.3.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-22676
Advanced Custom Fields: Image Crop Add-on <= 1.4.12 - Improper Authorization
High
CVE-2022-47183
Extra Block Design, Style, CSS for ANY Gutenberg Blocks <= 0.2.6 - Cross-Site Request Forgery
High
CVE-2023-22674
Dashicons + Custom Post Types <= 1.0.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.