Medium
CVE-2022-26850
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2022-31089
Invalid file request can crash server
High
CVE-2022-2123
WP Opt-in <= 1.4.1 - Cross-Site Request Forgery to Settings Update
Medium
d3004699-3285-426a-8a85-33be6c0c0b6f
Print My Blog – Print, PDF, & eBook Converter <= 3.15.8 - Unprotected AJAX Actions
High
CVE-2022-2091
Cache Images <= 3.2 - Cross-Site Request Forgery to Image Upload
Medium
CVE-2022-1894
Popup Builder <= 4.1.10 - Authenticated (Admin+) Cross-Site Scripting
Medium
94df820c-cafb-4a43-ace1-ec396b1ae6c5
Cache Images <= 3.2 - Missing Authorization
High
CVE-2022-1576
WP Maintenance Mode & Coming Soon <= 2.4.4 - Cross-Site Request Forgery
Medium
CVE-2022-2093
WP Duplicate Page <= 1.2 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2022-1599
Admin Management Xtended <= 2.4.4 - Cross-Site Request Forgery to Post Status Update
Medium
27cfd3cd-e622-4be7-af47-84324d6f6ea3
Analytify <= 4.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-0150
WP Accessibility Helper <= 0.6.0.6 - Reflected Cross-Site Scripting via wahi
Medium
CVE-2022-2089
Bold Page Builder <= 4.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1910
Shortcodes and extra features for Phlox theme <= 2.9.7 - Reflected Cross-Site-Scripting
Medium
CVE-2022-1474
WP Event Manager – Easily Build your Calendar of Events! <= 3.1.27 - Stored Cross Site Scripting
High
CVE-2022-31090
Guzzle <= 6.5.7 and 7.0-7.4.4 - Information Exposure
Medium
CVE-2022-2099
WooCommerce <= 6.5.1 - Authenticated (Admin+) HTML Injection
Medium
CVE-2021-46823
Denial of Service in python-ldap
Medium
28d41721-c538-4043-a411-3234ff1074bc
Send PDF for Contact Form 7 <= 0.9.1 - Multiple Cross-Site Scripting
Medium
CVE-2022-33987
got (JS Package) <= 11.8.4 and 12.0-<12.1.0 - Open Redirect
High
CVE-2022-22138
Uncontrolled Resource Consumption in fast-string-search
High
CVE-2022-25345
Uncontrolled Resource Consumption in @discordjs/opus
High
CVE-2022-25852
pg-native and libpq vulnerable to uncontrolled resource consumption
High
CVE-2022-21213
Prototype Pollution in mout
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.