Critical
CVE-2022-4794
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
de9a945b-31fb-4d0d-9dd1-23bcef1399c2
Show-Hide / Collapse-Expand <= 1.2.6 - Missing Authorization
Medium
CVE-2023-0446
My YouTube Channel <= 3.0.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4682
Lightbox Gallery <= 0.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4667
RSS Aggregator by Feedzy <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47159
Logaster Logo Generator <= 1.3 - Cross-Site Request Forgery to Arbitrary Media Deletion and Creation
Medium
CVE-2022-4791
Product Slider and Carousel with Category for WooCommerce <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
b6bff35f-f881-4c60-9611-4a04727bac36
WooCommerce Eway Gateway <= 3.5.0 - Insecure Direct Object Reference
Medium
CVE-2022-4747
Post Category Image With Grid and Slider <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4552
FL3R FeelBox <= 8.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
Medium
CVE-2022-4757
List Pages Shortcode <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4657
Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.5 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-4786
Video.js – HTML5 Video Player for WordPress <= 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0086
JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update
Medium
822a3b3b-db39-4edc-ae68-80fb82359316
WordPress RSS Feed Retriever <= 1.6.7 - Missing Authorization
Medium
CVE-2022-4553
FL3R FeelBox <= 8.1 - Cross-Site Request Forgery leading to Plugin Settings Reset
Medium
7a5ab5f1-db14-4448-9186-35a5f382cd1a
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4872
WooCommerce Chained Products < 2.12.0 - Missing Authorization to Arbitrary Options Update
Medium
6b6ab7bc-e815-4b3f-bda1-dd816ca457cd
Twitter Cards Meta <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4835
Social Sharing Toolkit <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4793
Blog Designer - Post and Widget <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
63f1c60f-8f72-4c99-92af-340c67b7411f
Logaster Logo Generator <= 1.3 - Missing Authorization to Arbitrary Media Deletion and Creation
Medium
CVE-2022-4680
Revive Old Posts <= 9.0.10 - Authenticated (Admin+) PHP Object Injection
Medium
62559fd6-a338-4f0f-ab1a-33fffbdc687e
WordPress RSS Feed Retriever <= 1.6.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.