High
CVE-2022-41840
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2022-37328
History Timeline <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2022-36798
Mega Addons For WPBakery Page Builder <= 4.2.7 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-36791
Torro Forms <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2939
WP Cerber Security <= 9.0 - User Enumeration Bypass
Medium
CVE-2022-36033
jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled
Critical
CVE-2022-39227
python-jwt vulnerable to token forgery with new claims
Critical
CVE-2022-2996
python-scciclient vulnerable to Man-in-the-middle (MITM) attacks
Medium
CVE-2022-37023
Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data
High
CVE-2022-37022
Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11
Critical
CVE-2022-37021
Apache Geode vulnerable to Deserialization of Untrusted Data
Critical
CVE-2022-2466
Quarkus does not terminate HTTP requests header context
Medium
CVE-2022-36365
WHA Crossword <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-36383
Word Search Puzzles game <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-37335
Word Search Puzzles game <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-37338
Blossom Recipe Maker <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-37411
Captcha Code <= 2.7 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2022-36796
CallRail Phone Call Tracking <= 0.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-36355
Easy Org Chart <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-40310
Rate my Post – WP Rating System <= 3.3.4 - Race Condition
High
CVE-2022-35277
GetResponse <= 5.5.19 - Cross-Site Request Forgery
High
CVE-2022-36373
MP3 jPlayer <= 2.7.3 - Cross-Site Request Forgery
Medium
CVE-2022-37330
WHA Crossword <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2022-36036
Improper Control of Generation of Code ('Code Injection') in mdx-mermaid
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.