Critical
CVE-2022-34858
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
a10ba041-ded4-41d4-93ba-7fa7389acd54
WordPress OpenID Connect Client <= 2.1.7 - Authentication Bypass
Medium
9d72604e-23ef-4a69-8839-cf8ff4aef3bc
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
Medium
CVE-2022-2169
Loading Page with Loading Screen <= 1.0.82 - Cross-Site Scripting
Critical
5d07d5e9-be7c-4c16-b931-d909ed8be361
Login with WHMCS <= 1.11.3 - Authentication Bypass
High
CVE-2022-31092
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore
Medium
CVE-2022-31057
Authenticated Stored Cross-site Scripting in Shopware
High
CVE-2024-21907
Improper Handling of Exceptional Conditions in Newtonsoft.Json
Medium
CVE-2022-30874
Cross-site Scripting in NukeViet CMS
High
CVE-2022-22979
Denial of Service in Spring Cloud Function
Medium
CVE-2021-41924
Cross-site Scripting in krayin/laravel-crm
High
e9303719-3d48-4a55-ac19-0c603801d458
Dropshipping and affiliates for Amazon and woocommerce <= 1.4.3 - Missing Authorization
Medium
e62a58ec-4ea5-4241-8148-fc8801bd59b3
Our Services Showcase <= 2.0 - Missing Authorization
High
CVE-2022-2039
Free Live Chat Support <= 1.0.11 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
d2b4203f-7301-4ab6-b7a1-c43516bea477
Football Live Scores <= 1.5 - Missing Authorization
Medium
bb2a67ff-a452-4ecb-9fd7-bf05fe43a2f7
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Cross-Site Scripting
Medium
a6b0b516-af5c-474a-a674-b52cf80207ec
Re:amaze Helpdesk & Live Chat <= 1.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2186
Simple Post Notes <= 1.7.5 - Subscriber+ Stored Cross-Site Scripting
Critical
7c3ae610-44ef-4354-b085-00c00a486dc9
Login with Cognito <= 1.4.6 - Authentication Bypass
Medium
CVE-2022-2118
404s <= 3.4.9 - Administrator+ Cross-Site Scripting
High
CVE-2022-2001
DX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
6a226790-0774-43f6-a476-a2dac7ae153b
Freshdesk (official) <= 2.3.6 - Cross-Site Request Forgery
High
CVE-2022-30337
WP Meta SEO <= 4.4.8 - Cross-Site Request Forgery to Settings Update
Medium
58a1f3a1-e00c-4b63-83ad-73205c67c0ac
eBay Dropshipping and Affiliate by Wooshark <= 1.5.6 - Unprotected AJAX Actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.