Medium
7f447d25-1a38-48fe-8079-5ff425382046
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Medium
CVE-2022-40209
WordPress Importer: Import any XML File to WordPress <= 1.0.2 - Reflected Cross-Site Scripting
Low
CVE-2022-37599
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
Low
CVE-2022-37603
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
Low
ghsa-jjmg-x456-w976
Incorrect default cookie name and recommendation
Medium
CVE-2022-3438
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
High
CVE-2022-3419
Automatic User Roles Switcher <= 1.1.1 - Missing Authorization to Privilege Escalation
High
CVE-2022-3334
Easy WP SMTP <= 1.4.9 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-3237
WP Contact Slider <= 2.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3441
Rock Convert <= 2.10.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-41620
SeoSamba for WordPress Webmasters <= 1.0.5 - Cross-Site Request Forgery
High
CVE-2022-3380
Customizer Export/Import <= 0.9.4 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3374
Ocean Extra <= 2.0.4 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3366
PublishPress Capabilities <= 2.5.1 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-3440
Rock Convert <= 2.10.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-2627
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Medium
67e3096e-7641-4f95-9e16-c1b45028c7eb
eCommerce Product Catalog Plugin for WordPress <= 3.0.70 - Reflected Cross-Site Scripting
High
CVE-2022-3357
Smart Slider 3 <= 3.5.1.9 - PHP Object Injection
Critical
CVE-2022-3254
AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection
Medium
CVE-2022-2190
Gallery Plugin for WordPress – Envira Photo Gallery <= 1.8.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-3096
WP Total Hacks <= 4.7.2 - Authenticated (Subscriber+) Plugin Options Update to Cross-Site Scripting
Medium
CVE-2022-2167
Newspaper <= 11.5.1 - Reflected Cross-Site Scripting
Medium
05c4d7e3-f8a8-4c11-b962-38922b0801f9
s2Framework <= 4.1.5 - Reflected Cross-Site Scripting
High
CVE-2022-39287
tiny-csrf has openly visible CSRF tokens
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.