Medium
CVE-2022-44631
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2022-43453
WP Tools <= 3.41 - Missing Authorization leading to Authenticated (Subscriber+) Authorization Bypass
Medium
CVE-2022-4197
Sliderby10Web <= 1.2.52 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-4110
Eventify <= 2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-21126
HTSJDK is vulnerable to exposure of resource(s) to the wrong sphere
High
CVE-2022-25848
static-dev-server vulnerable to path traversal
Medium
CVE-2022-4036
Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
Medium
CVE-2022-4028
Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures
High
CVE-2022-4032
Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer
Medium
CVE-2022-4034
Appointment Hour Booking <= 1.3.72 - CSV Injection
High
CVE-2022-4035
Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form
Medium
CVE-2022-4971
Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting
Medium
7255319c-8175-4885-8f94-3f46f9e577a6
Super Progressive Web Apps <= 2.2.8 - Missing Authorization
High
CVE-2021-24942
Menu Item Visibility Control <= 0.5 - Authenticated (Admin+) Remote Code Execution
High
CVE-2022-4163
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate
Medium
CVE-2022-4029
Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value
High
CVE-2022-4027
Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies
High
CVE-2022-3605
WP CSV Exporter <= 1.3.6 - CSV Injection
High
CVE-2022-4030
Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion
High
CVE-2022-45362
Paytm Payment Gateway <= 2.7.0 - Unauthenticated Server-Side Request Forgery
High
CVE-2022-4151
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id
Low
CVE-2022-4031
Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification
Medium
CVE-2022-45836
Download Manager <= 3.2.59 - Refleced Cross-Site Scripting
Low
ghsa-ggrh-grj3-vfvw
Package discontinued because Bitly lowered the free quota
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.