Medium
6ac3b00e-26f2-471d-a682-6cb4939e819e
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
611b88f4-96ae-47e4-8642-e09bee333468
Royal Custom CSS for Page and Post <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-34658
Download Manager <= 3.2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2022-2317
Simple Membership <= 4.1.2 - Membership Privilege Escalation
High
CVE-2022-31147
jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method
Medium
ghsa-c58j-88f5-h53f
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares
Medium
CVE-2022-31108
Possible inject arbitrary `CSS` into the generated graph affecting the container HTML
High
CVE-2022-30290
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker can abuse the identified vulnerability in order to arbitrarily change their reg
Medium
CVE-2022-30289
A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.2.4. An attacker can abuse the vulnerability to upload a malicious file that will
Medium
CVE-2022-2309
lxml NULL Pointer Dereference allows attackers to cause a denial of service
Critical
CVE-2022-33171
SQL injection in typeORM
Medium
CVE-2022-2300
Cross-site Scripting in microweber
Medium
CVE-2022-2181
Advanced WordPress Reset <= 1.5 - Reflected Cross-Site Scripting
High
CVE-2022-2444
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Medium
d7bee25e-7574-4d3d-ad58-9b30d99de525
LearnPress – WordPress LMS Plugin <= 4.1.6.7 - Reflected Cross-Site Scripting
High
CVE-2022-2256
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
High
CVE-2022-2443
FreeMind WP Browser <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-0598
Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2278
Featured Image from URL (FIFU) <= 4.0.0 - Stored Cross-Site Scripting
Medium
CVE-2022-2305
Popups <= 1.9.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2325
Invitation Based Registrations <= 2.2.84 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-2435
AnyMind Widget <= 1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2022-34265
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
Medium
CVE-2022-0594
Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic <= 9.7.5 - Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.