Medium
CVE-2022-2423
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-2473
WP-UserOnline <= 2.87.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-33191
Testimonials <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-30998
Homepage Product Organizer for WooCommerce <= 1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-2116
Contact Form DB - Elementor <= 1.7 - Reflected Cross-Site Scripting
Medium
321bfc32-a08d-46ea-98c8-c7be10905307
Web en Mantenimiento <= 1.0.6 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2020-7677
thenify before 3.3.1 made use of unsafe calls to `eval`.
Medium
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
High
CVE-2021-35065
glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service
High
Exploited in attacks
CVE-2022-33891
Apache Spark UI can allow impersonation if ACLs enabled
High
CVE-2020-7641
grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload
Medium
CVE-2022-2391
Inspiro Pro <= 7.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-2409
Rough Chart <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2412
Better Tag Cloud <= 0.99.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2361
WP Social Chat – Click To Chat App <= 6.0.4 - Administrator+ Stored Cross-Site Scripting
Medium
CVE-2022-2462
Transposh WordPress Translation <= 1.0.9.6 - Sensitive Information Disclosure
Medium
CVE-2022-2371
YaySMTP – Simple WP SMTP Mail <= 2.2 - Stored Cross-Site Scripting
High
CVE-2022-2046
Directorist <= 7.2.2 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2022-2425
WP DS Blog Map <= 3.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2426
Thinkific Uploader <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
801132f5-e4ea-4d56-8429-9f33896f6dff
My Calendar <= 3.3.16 - Administrator+ Stored Cross-Site Scripting
Critical
CVE-2022-2460
WPDating <= 7.4.0 - SQL Injection
Medium
CVE-2022-2410
mTouch Quiz <= 3.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-34839
WP OAuth2 Server <= 1.0.1 - Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.