High
cc4f2fd3-ed6b-4fe4-b300-02b1b35ebb7b
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2022-1090
Good & Bad Comments <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-25102
All In One WP Security & Firewall <= 4.4.10 - Open Redirect and Reflected Cross-Site Scripting
High
CVE-2022-0141
Visual Form Builder <= 3.0.7 - Cross-Site Request Forgery to Data Modification
Medium
CVE-2022-0953
Anti-Malware Security and Brute-Force Firewall <= 4.20.95 - Reflected Cross-Site Scripting
Medium
7dfa84ed-0edf-4a75-8ec3-986c3880353c
Easy Social Icons <= 3.1.4 - Admin+ Cross-Site Scripting
Medium
CVE-2022-1153
LayerSlider <= 7.1.1 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-0780
SearchIQ – The Search Solution <= 3.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-1239
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 8.8.13 - Server Side Request Forgery
High
CVE-2022-1281
Photo Gallery by 10Web <= 1.6.2 - SQL Injection
Medium
CVE-2022-1054
RSVP and Event Management <= 2.7.7 - Unauthenticated Sensitive Information Disclosure
Critical
CVE-2022-0693
Master Elements <= 8.0 - Unauthenticated SQL injection
Medium
CVE-2022-0662
AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Advert Names
Medium
CVE-2022-1255
Import and export users and customers <= 1.19.2 - Stored Cross-Site Scripting
Medium
CVE-2021-25120
Easy Social Feed <= 6.2.6 - Reflected Cross-Site Scripting
High
CVE-2022-1273
Import WP – Import and Export WordPress data to XML or CSV files <= 2.4.5 - Authenticated Arbitrary File Upload
Medium
CVE-2022-0649
AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Group Names
Medium
7c32d967-85b9-4c93-a948-0126efb78f39
WooCommerce < 5.7.0 & WooCommerce Admin < 2.6.4 - Information Disclosure
Medium
CVE-2022-0398
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Subscriber+ Arbitrary Affiliate Links Creation
Medium
CVE-2022-0634
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery
Medium
CVE-2022-1228
Opensea <= 1.0.2 - Cross-Site Scripting
High
CVE-2022-1219
SQL Injection in Pimcore
High
CVE-2021-43515
Improper Neutralization of Formula Elements in a CSV File in Kimai 2
Medium
CVE-2022-0876
Social comments by WpDevArt <= 2.4.9 - Admin+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.