High
6635db72-8302-421d-9011-7eabb57c43a2
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
5bf0267d-b84f-4ad2-8bb3-cc2aa4996af1
PostmagThemes Demo Import <= 1.0.6 - Authenticated (Admin+) Arbitrary File Upload
Medium
2ae939f4-5a90-48ca-ae13-2ccbd6d8d08a
Simple Telegram <= 0.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
12ad3c6c-9a01-4801-b754-79e6e1b2d2a3
WooCommerce Product Carousel, Slider & Grid Ultimate <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2080
Sensei LMS <= 4.5.1 - Missing Authorization
Medium
CVE-2022-2034
Sensei LMS <= 4.4.3 - Information Disclosure
High
CVE-2022-2657
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Multiple Unprotected AJAX Actions
Medium
332b8d96-89b2-473b-9186-239e49f5b064
Download Manager <= 3.2.53 - Reflected Cross-Site Scripting
High
CVE-2022-36359
Django vulnerable to Reflected File Download attack
High
CVE-2022-25867
Socket.IO-client Java before 2.0.1 vulnerable to NULL Pointer Dereference
Critical
CVE-2020-7795
get-npm-package-version Command Injection vulnerability
Critical
CVE-2020-28453
npos-tesseract Command Injection vulnerability
Critical
CVE-2020-28451
image-tiler susceptible to command injection
Critical
CVE-2020-28437
heroku-env susceptible to command injection
Critical
CVE-2020-28434
gitblame susceptible to command injection
Critical
CVE-2020-28433
node-latex-pdf is susceptible to command injection
Critical
CVE-2020-28425
curljs Command Injection vulnerability
Critical
CVE-2020-28423
monorepo-build Command Injection vulnerability
Medium
CVE-2022-2537
WooCommerce PDF Invoices & Packing Slips 2.14.0 - 3.0.0 - Reflected Cross-Site Scripting
High
CVE-2022-2261
WPIDE – File Manager & Code Editor <= 2.6 - Authenticated (Admininstrator+) Local File Inclusion
Medium
CVE-2022-2267
Mailchimp for WooCommerce <= 2.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2022-2556
Mailchimp for WooCommerce <= 2.7.1 - Authenticated (Admin+) Server-Side Request Forgery
Critical
CVE-2022-35924
NextAuth.js before 4.10.3 and 3.29.10 sending verification requests (magic link) to unwanted emails
Medium
CVE-2022-2596
node-fetch Inefficient Regular Expression Complexity
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.