High
CVE-2022-47155
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-0727
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
Medium
CVE-2023-0726
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder
Medium
CVE-2023-0728
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
Medium
CVE-2023-0730
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
Medium
CVE-2023-0716
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
Medium
CVE-2023-0717
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
Medium
CVE-2023-0718
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
Medium
CVE-2023-0713
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
Medium
CVE-2023-0722
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
High
CVE-2023-0477
Auto Featured Image (Auto Post Thumbnail) <= 3.9.15 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2023-0712
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
Medium
CVE-2023-0724
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
Medium
ee50731f-696f-4e9f-a930-05b2b23752de
Cost of Goods for WooCommerce <= 2.8.6 - Cross-Site Request Forgery in save_costs
Medium
CVE-2023-0685
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
Medium
df1a3425-b1d7-4914-ab19-c215d4e845ea
Album and Image Gallery plus Lightbox <= 1.6.2 - Cross-Site Request Forgery
Medium
CVE-2022-46798
ShopLentor <= 2.5.1 - Cross-Site Request Forgery to Post Updates
Medium
CVE-2022-46848
Visualizer <= 3.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-45068
Mercado Pago payments for WooCommerce <= 6.3.1 - Cross-Site Request Forgery
High
CVE-2023-0381
GigPress <= 2.3.28 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-46796
CURCY <= 2.1.25 - Missing Authorization to Currency Exchange Retrieval
Medium
c3190f9f-8b2f-4251-8804-f386e2c5678f
WP-Optimize <= 3.2.11 - Cross-Site Request Forgery
Medium
CVE-2023-25035
Quick Contact Form <= 8.0.3.1 - Cross-Site Request Forgery to Sensitive Information Disclosure
Medium
CVE-2023-25026
PayPal Brasil para WooCommerce <= 1.4.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.