High
CVE-2022-4489
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-4459
WP Show Posts <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2022-4681
Hide My WP < 6.2.9 - Unauthenticated SQL Injection
Medium
CVE-2023-0173
WPFunnels <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
Medium
CVE-2023-0070
ResponsiveVoice Text To Speech <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-21538
.NET Denial of Service Vulnerability
Low
CVE-2023-22489
Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted
Medium
CVE-2023-22488
Flarum notifications can leak restricted content
High
CVE-2023-22487
Flarum post mentions can be used to read any post on the forum without access control
High
CVE-2023-0163
convict vulnerable to Prototype Pollution
Medium
CVE-2021-46871
phoenix_html allows Cross-site Scripting in HEEx class attributes
Medium
CVE-2023-22899
Zip4j Origin Validation Error
Medium
CVE-2023-54395
PocketMine-MP vulnerable to denial-of-service by sending large modal form responses
Medium
CVE-2022-4709
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Import
Medium
CVE-2022-4825
WP-ShowHide <= 1.04 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-23712
User Meta Manager <= 3.4.9 - Cross Site Request Forgery
Medium
CVE-2022-4700
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activation
Medium
CVE-2022-4702
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivation
Medium
CVE-2022-4711
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Update
Medium
CVE-2022-4626
PPWP – WordPress Password Protect Page <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4708
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modification
Medium
CVE-2022-4710
Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting
Medium
CVE-2023-0144
Event Manager and Tickets Selling Plugin for WooCommerce <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4833
YourChannel <= 1.2.1 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.