Critical
CVE-2022-3241
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
ef1468eb-9b98-4d45-b357-70998ba17de7
UpdraftCentral Dashboard 0.8.23 - Server-Side Request Forgery
High
d2031289-eaf3-4a1b-8771-769c08d99ca3
Royal Elementor Addons <= 1.3.55 - Cross-Site Request Forgery
High
d0301141-bbc6-4a9e-b816-888554600b57
iubenda <= 3.3.2 - Cross-Site Request Forgery
Medium
CVE-2022-4256
All-in-One Addons for Elementor - WidgetKit <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4519
WP User <= 7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4260
WP-Ban <= 1.69 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4142
WordPress Filter Gallery Plugin <= 0.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
145fec62-87a7-4641-9ce4-dca5afb47d69
Add to home screen WP Plugin <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-46164
NodeBB vulnerable to account takeover via prototype vulnerability
High
CVE-2022-37783
Craft CMS discloses password hashes
High
CVE-2022-41957
muhammara and hummus vulnerable to Unchecked Return Value to NULL Pointer Dereference
Critical
CVE-2022-45046
camel-ldap component allows LDAP Injection when using the filter option
Critical
CVE-2022-42496
nadesiko3 vulnerable to OS Command Injection
Medium
CVE-2022-41777
nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit
Critical
CVE-2022-41642
Nadesiko3 OS Command Injection vulnerability
High
CVE-2022-43484
TERASOLUNA Server Framework vulnerable to ClassLoader manipulation
Medium
CVE-2022-4236
Welcart e-Commerce <= 2.8.4 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2022-4166
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via addCountS
High
CVE-2022-4150
Contest Gallery (Pro) <= 19.1.5 - SQL Injection via option_id
Medium
CVE-2022-3835
Kwayy HTML Sitemap <= 3.1 - Authenticated (Administrator+) Stored Cross-Site Scipting
High
CVE-2022-4153
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via upload[]
Medium
CVE-2022-4227
Booster (<= 5.6.2), Booster Plus (< 6.0.0), and Booster Elite (< 6.0.0) for WooCommerce - Reflected Cross-Site Scripting
High
CVE-2022-4159
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via cg_id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.