Critical
CVE-2022-3982
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Critical
CVE-2022-3915
Dokan <= 3.7.5 - Unauthenticated SQL Injection
Medium
CVE-2022-3880
Anti Hacker <= 4.19 - Missing Authorization to Arbitrary Plugin Install
Medium
CVE-2022-45349
Betheme <= 26.6.2 - Missing Authorization to Post Title Change
High
CVE-2022-3930
Directorist <= 7.4.2.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Medium
CVE-2022-45363
Betheme <= 26.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2022-3921
Listingo <= 3.2.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-45352
Betheme <= 26.6.2 - Missing Authorization to Theme Settings Update
Medium
CVE-2022-4016
Booster (<= 5.6.6), Booster Plus (<= 5.6.5), and Booster Elite (<= 1.1.7) for WooCommerce - Cross-Site Request Forgery leading to Arbitrary Custom Role Creation/Deletion
Medium
CVE-2022-3561
Cross-site Scripting in librenms/librenms
High
CVE-2022-3525
Deserialization of Untrusted Data in librenms/librenms
High
CVE-2022-4068
Cross-site Scripting in librenms/librenms
Medium
CVE-2022-4067
Cross-site Scripting in librenms/librenms
Medium
CVE-2022-3562
Cross-site Scripting in librenms/librenms
Medium
CVE-2022-3516
Cross-site Scripting in librenms/librenms
Critical
CVE-2022-4070
Insufficient Session Expiration in librenms/librenms
Medium
CVE-2022-4069
Cross-site Scripting in librenms/librenms
Medium
CVE-2022-4010
Image Hover Effects <= 5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
624af5e1-dc40-4d33-bfac-1a409b81a096
SpeakOut! Email Petitions <= 4.0.3 - Reflected Cross-Site Scripting
Medium
1254e0ad-852e-4fd4-8317-61bfbbc9f737
External Links <= 2.55 - Authenticated (Administrator+) Cross-Site Scripting
High
CVE-2022-4065
TestNG is vulnerable to Path Traversal
High
f6c94024-20fb-4cc1-a093-1b9974e61220
Address Autocomplete Using Google Place Api <= 1.0.0 - Cross-Site Request Forgery
Medium
f62063c8-7559-492a-9caf-fae256052d1a
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.8.34 - Missing Authorization to Plugin Deactivation
High
CVE-2022-3861
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.