Medium
CVE-2022-4542
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-4230
WP Statistics <= 13.2.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-4485
Page-list <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4625
Login Logout Menu <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4675
Mongoose Page Plugin <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4383
CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQL Injection
Medium
CVE-2022-4474
Easy Social Feed <= 6.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4307
Pardakht Delkhah <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4672
WordPress Simple PayPal Shopping Cart <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4673
Rate my Post – WP Rating System <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4746
FluentAuth <= 1.0.1 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-4718
Landing Page Builder <= 1.4.9.8.9 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2022-4668
Easy Appointments <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-3811
EU Cookie Law <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Low
762
LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login - Other
Medium
CVE-2021-30134
php-mod/curl allows Cross-site Scripting
Critical
CVE-2022-4742
json-pointer vulnerable to Prototype Pollution
Critical
CVE-2022-4060
User Post Gallery - UPG <= 2.19 - Missing Authorization to Remote Command Execution
Critical
CVE-2020-36632
flat vulnerable to Prototype Pollution
High
CVE-2021-4279
Starcounter-Jack JSON-Patch Prototype Pollution vulnerability
High
CVE-2021-4278
tree-kit vulnerable to Prototype Pollution
High
CVE-2020-36629
SimbCo httpster vulnerable to Path Traversal
Medium
CVE-2022-44381
Snipe-IT allows attackers to check whether a user account exists
Medium
CVE-2022-44380
Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.