Medium
CVE-2022-45819
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
5778ba3d-6670-47ad-ae65-50b6fb8e5db0
Real Estate 7 Theme <= 3.3.4 - Unauthenticated Arbitrary Email Sending
Medium
CVE-2023-1323
Easy Forms for Mailchimp <= 6.8.8 - Authenticated (Administrator+) Cross-Site Scripting via Form Name
Medium
CVE-2023-27413
W4 Post List <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'w4pl[no_items_text]'
Medium
CVE-2023-0399
Image Over Image For WPBakery Page Builder <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23668
GiveWP <= 2.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via give_form_grid shortcode
Medium
cb7ec7ad-797b-4a5c-9b1c-31284083faef
GiveWP <= 2.25.1 - Cross-Site Request Forgery via save
Medium
CVE-2023-25450
GiveWP <= 2.25.1 - Cross-Site Request Forgery via give_cache_flush
Medium
a9939ffe-a5d5-45cb-b673-665acf1ff09d
GiveWP <= 2.25.1 - Cross-Site Request Forgery via process_bulk_action
Medium
CVE-2023-27631
Daily Prayer Time <= 2023.03.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-27632
Daily Prayer Time <= 2023.03.08 - Cross-Site Request Forgery
Medium
CVE-2023-25486
Clone <= 2.3.7 - Missing Authorization via wp_ajax_tifm_save_decision
Medium
CVE-2023-27418
Side Menu Lite <= 4.0 - Cross-Site Request Forgery to Item Deletion
High
CVE-2023-22719
GiveWP <= 2.25.1 - Unauthenticated CSV Injection
Medium
CVE-2023-25449
cformsII <= 15.0.4 - Cross-Site Request Forgery leading to Settings Updates
Medium
CVE-2023-27417
Affiliate Super Assistent <= 1.5.1 - Cross-Site Request Forgery to Settings Update and Cache Clearing
Medium
533f71d5-823d-45eb-8ecf-76afafd2a5d3
Popup Maker <= 1.18.0 - Cross-Site Request Forgery via init
Medium
3d12d692-231b-4e15-a119-80fd74566af4
Webmention <= 4.0.8 - Reflected Cross-Site Scripting via 'replytocom'
Medium
343cbdda-2ec5-437f-b563-96c61663314d
Updraft Plus <= 1.22.24 - Information Disclosure via updraft_ajaxrestore
Medium
314d3e0c-ba29-4795-a646-40e0acfc3405
Clone <= 2.3.7 - Cross-Site Request Forgery via wp_ajax_tifm_save_decision
Medium
CVE-2023-23802
HT Easy GA4 ( Google Analytics 4 ) <= 1.0.6 - Cross-Site Request Forgery via plugin_activation
Medium
2a0381b1-9b63-41cb-8125-d22274b98867
GiveWP <= 2.25.1 - Cross-Site Request Forgery to Cross-Site Scripting via render_dropdown
Medium
CVE-2022-40312
GiveWP <= 2.25.1 - Authenticated (Admin+) Server-Side Request Forgery via give_get_content_by_ajax_handler
Medium
2253cb38-3688-4e4d-afd1-582c8743c89a
301 Redirects - Easy Redirect Manager <= 2.72 - Cross-Site Request Forgery via dismiss_notice
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.