Medium
cce4a7cc-d93c-4d0e-ba63-b73bee0ea181
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-25649
Affiliate For WooCommerce <= 4.7.0 - Missing Authorization
Medium
bfb329da-00df-4178-ad40-9b0b718dc30e
Add Custom Post Type into Post Query <= 1.03 - Reflected Cross-Site Scripting
High
CVE-2022-2593
Better Search Replace <= 1.4 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-34154
Enable SVG, WebP & ICO Upload <= 1.1.0 - Arbitrary File Upload
High
CVE-2022-36284
Affiliate For WooCommerce premium <= 4.7.0 - Authenticated Insecure Direct Object Reference
Medium
a646ebe5-3445-4e9b-99a9-23761d4fba9c
Comment Fields <= 1.03 - Reflected Cross-Site Scripting
Medium
CVE-2022-2375
WP Sticky Button <= 1.4 - Missing Authorization to Arbitrary Settings Update
Low
CVE-2022-36343
Enable SVG, WebP & ICO Upload <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-2392
Lana Downloads Manager <= 1.7.1 - Authenticated (Contributor+) Arbitrary File Download
Medium
988c1968-ef92-4d3d-bbd5-88e73512ebb4
Require & Limit Categories, Tags, Featured Image and taxonomies <= 1.26 - Reflected Cross-Site Scripting
Medium
986957ab-7394-457e-9a6f-f6b96b56cd15
Breadcrumbs Shortcode <= 1.44 - Reflected Cross-Site Scripting
Medium
91e5c89e-85d3-4dda-8b79-e0b4d64e29f0
All custom fields & groups <= 1.04 - Reflected Cross-Site Scripting
High
CVE-2022-3142
NEX-Forms <= 7.9.6 - Authenticated (Administrator+) SQL Injection
Medium
87b8386e-863e-4a33-8beb-aab3e704ecb6
Built-in Widgets Query extend <= 1.05 - Reflected Cross-Site Scripting
High
CVE-2022-2558
Simple Job Board <= 2.9.6 - Information Disclosure
Medium
CVE-2022-2312
Student Result or Employee Database <= 1.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2022-2172
LinkWorth plugin <= 3.3.3 - Cross-Site Request Forgery to Plugin Setting Update
High
CVE-2022-2275
WP Edit Menu <= 1.5.0 - Cross-Site Request Forgery
High
CVE-2022-38704
SEO Redirection Plugin – 301 Redirect Manager <= 8.9 - Cross-Site Request Forgery
High
CVE-2022-2544
Ninja Job Board <= 1.3.2 - Information Disclosure
Medium
66bca09b-7f53-4e7a-a58c-a28ad6a4825e
Download buttons for Youtube videos <= 1.03 - Reflected Cross-Site Scripting
High
CVE-2022-2555
Yotpo Reviews for WooCommerce (Unofficial) <= 2.0.4 - Cross-Site Request Forgery to Plugin Settings Update
High
CVE-2022-1251
Ask Me <= 6.8.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.