High
CVE-2022-4546
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2023-23721
Admin Log <= 1.50 - Cross-Site Request Forgery
High
CVE-2023-0405
GPT AI Power <= 1.4.37 - Missing Authorization
Medium
CVE-2023-23892
M Chart <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-22675
Fast Cache <= 1.5 - Cross-Site Request Forgery
High
4d6ea02d-df63-476c-b205-fa64ada18db5
WP Helper Premium <= 4.2.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2022-4628
Easy PayPal Buy Now Button <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23896
URL Shortener by MyThemeShop <= 1.0.16 - Missing Authorization
High
CVE-2023-22714
Coming Soon by Supsystic <= 1.7.10 - Cross Site Request Forgery
Medium
CVE-2023-22721
Oi Yandex.Maps for WordPress <= 3.2.7 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
High
d589bada-3568-45ed-9f7c-fb14363a617a
MainWP (Various extensions) - Missing Authorization to Arbitrary Page/Post Deletion
High
cb105ff0-5085-4813-81a6-b1f0798d576c
MainWP (Various extensions) - Cross-Site Request Forgery
Medium
CVE-2023-23663
MainWP Comments Extension <= 4.0.6 - Missing Authorization
High
CVE-2023-23645
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) PHP Code Injection
Critical
CVE-2023-23649
MainWP Links Manager Extension <= 2.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-0385
Custom 404 Pro <= 3.7.1 - Cross-Site Request Forgery
Medium
94f7f2d2-e90b-4978-bab8-eee160949567
MainWP UpdraftPlus Extension <= 4.0.6 - Missing Authorization
Medium
CVE-2022-4512
Better Font Awesome <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Critical
CVE-2023-23656
MainWP File Uploader Extension <= 4.1 - Unauthenticated Arbitrary File Upload
Medium
6c563616-e405-4b3e-a70a-543f42118a97
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary Plugin Installation
Medium
CVE-2023-0333
TemplatesNext ToolKit <= 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23650
MainWP Code Snippets Extension <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
306a9960-7139-4142-a249-4de2b3c4b985
MainWP (Various Extensions) - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2023-23660
MainWP Maintenance Extension <= 4.1.1 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.