Medium
CVE-2022-43463
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Critical
CVE-2022-3754
phpMyFAQ contains Weak Password Requirements
Critical
CVE-2022-37621
thlorenz browserify-shim vulnerable to prototype pollution
Critical
CVE-2022-39365
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Medium
CVE-2022-3753
Evaluate <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-41831
WP Glossary <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-43459
Forms by CaptainForm <= 2.5.3 - Cross-Site Request Forgery
High
CVE-2022-43281
wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h.
High
CVE-2022-3500
A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors
Medium
CVE-2022-26884
Apache DolphinScheduler vulnerable to Path Traversal
High
CVE-2022-3383
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Select
Medium
CVE-2022-43492
Comments – wpDiscuz <= 7.4.2 - Insecure Direct Object References
High
CVE-2022-1578
My wpdb <= 1.1.12 - Cross-Site Request Forgery to Arbitrary SQL Query Execution
High
CVE-2022-40687
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Settings Disconnect
High
CVE-2022-3384
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_options
High
CVE-2022-44740
Creative Mail <= 1.5.4 - Cross-Site Request Forgery
Critical
CVE-2022-42497
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary Code Execution
Medium
CVE-2022-43461
Slideshow SE <= 2.5.5 - Authenticated (Subscriber+) Cross-Site Scripting
Medium
CVE-2022-3361
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes
Medium
CVE-2022-3739
WP Best Quiz <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2022-3750
Ask Me < 6.8.7 - Cross-Site Request Forgery
Critical
CVE-2022-42698
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary File Upload
High
CVE-2022-41135
Customizable WordPress Gallery Plugin – Modula Image Gallery <= 2.6.9 - Missing Authorization to Plugin Settings Change
High
CVE-2022-40686
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Plugin Deactivation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.