Medium
CVE-2022-1566
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-1598
WPQA - Builder forms Addon For WordPress <= 5.4 - Unauthenticated Private Message Disclosure
High
CVE-2018-25033
ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.
Critical
CVE-2022-28470
marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
High
CVE-2022-1611
Bulk Page Creator <= 1.1.3 - Cross-Site Request Forgery to Arbitrary Page Creation
High
CVE-2022-1689
Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via Update
Medium
CVE-2022-1645
Amazon Link <= 3.2.10 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1646
Simple Real Estate Pack <= 1.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1542
hpb Dashboard <= 1.3.1 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1275
BannerMan <= 0.2.4 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1644
Call&Book Mobile Bar <= 1.2.2 - Authenticated (Admin+) Cross-Site Scripting
Critical
CVE-2022-1692
CP Image Store with Slideshow <= 1.0.67 - Unauthenticated SQL Injection
High
CVE-2022-1691
Realty Workstation <= 1.0.9 - Authenticated SQL Injection
Medium
CVE-2022-0376
User Meta <= 2.4.2 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-1583
External Links in New Window / New Tab <= 1.42 - Tabnabbing
Medium
CVE-2022-1387
No Future Posts <= 1.4 - Stored Cross-Site Scripting
Medium
CVE-2022-1294
IMDB Info Box <= 2.0 - Stored Cross-Site Scripting
High
CVE-2022-1683
amtyThumb <= 4.2.0 - Authenticated SQL Injection
Medium
CVE-2022-1643
Birthdays Widget <= 1.7.18 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2014-4845
BannerMan <= 0.2.4 - Authenticated (Admin+) Cross-Site Scripting
Medium
62a6fc85-db3c-4696-8102-d0247daae56c
StaffList <= 3.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-1589
Change WP Admin Login <= 1.0.9 - Missing Authorization Checks
High
CVE-2022-1684
CUBE SLIDER <= 1.2 - Authenticated (Admin+) SQL Injection
High
CVE-2022-1688
Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via ids Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.