High
CVE-2022-2559
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-38703
MaxButtons <= 9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-36346
WordPress Button Plugin MaxButtons <= 9.2 - Cross-Site Request Forgery
High
CVE-2021-36852
WP Hotel Booking <= 1.10.5 - Cross-Site Request Forgery
Medium
CVE-2022-36371
My Calendar <= 3.3.16 - Open Redirect
High
CVE-2022-2233
Banner Cycler <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2021-36861
Rich Reviews by Starfish <= 1.9.14 - Cross-Site Request Forgery
High
CVE-2022-36288
Download Manager <= 3.2.48 - Cross-Site Request Forgery
Medium
391d65a7-1675-4eae-b129-a1208cd95669
Social Slider Feed <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-34347
Download Manager <= 3.2.48 - Cross-Site Request Forgery to Plugin Settings Update
Critical
CVE-2022-36296
ActiveDEMAND <= 0.2.27 - Missing Authorization Checks
Critical
CVE-2022-34149
WP OAuth Server <= 3.0.4 - Authentication Bypass
Low
CVE-2022-31177
Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings
Medium
CVE-2022-2589
Fava vulnerable to reflected cross-site scripting
Medium
CVE-2022-2362
Download Manager <= 3.2.49 - IP Blocking Bypass
Medium
eb828160-b537-4435-9d85-47e0d70a6704
Remove tabs and fields from WooCommerce <= 1.68 - Reflected Cross-Site Scripting
High
e2e2f446-5391-4189-8c9c-3be2459808d0
Social Slider Feed <= 2.0.4 - Missing Authorization
Medium
e012d7a0-46f9-4f3b-a178-2d06655fd441
External url as post Featured Image <= 2.02 - Reflected Cross-Site Scripting
Medium
CVE-2022-2198
WPQA - Builder forms Addon For WordPress < 5.7 - Information Disclosure
High
CVE-2022-2276
WP Edit Menu < 1.5.0 - Missing Authorization to Post Deletion
High
dc2532b4-907f-438b-baab-c3966cf30f74
Student Result or Employee Database <= 1.7.9 - Missing Authorization
Medium
d36d97fb-2fce-4248-8955-7d66919487e3
Automatic pages for Privacy Policy, Terms, About, Contact us <= 1.41 - Reflected Cross-Site Scripting
Medium
d1f86c9d-38dc-4d5d-af37-9443348fe1e8
Redirect By Cookie <= 1.06 - Reflected Cross-Site Scripting
High
CVE-2022-2407
WP phpMyAdmin <= 5.2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.