High
CVE-2022-46867
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-0096
Happyforms <= 1.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blocks
Medium
CVE-2022-47591
Map Multi Marker <= 3.2.1 - Reflected Cross-Site Scripting
High
CVE-2022-47147
ipBlockList <= 1.0 - Cross Site Request Forgery
High
CVE-2022-47611
Hover Image <= 1.4.1 - Cross-Site Request Forgery
Medium
CVE-2023-0081
MonsterInsights <= 8.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-0234
SiteGround Security <= 1.3.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-22676
Advanced Custom Fields: Image Crop Add-on <= 1.4.12 - Improper Authorization
High
CVE-2022-47183
Extra Block Design, Style, CSS for ANY Gutenberg Blocks <= 0.2.6 - Cross-Site Request Forgery
High
CVE-2023-22674
Dashicons + Custom Post Types <= 1.0.2 - Missing Authorization
High
CVE-2022-47167
Crayon Syntax Highlighter <= 2.8.4 - Cross-Site Request Forgery
High
CVE-2022-47592
MagicForm <= 0.1 - Cross-Site Scripting
High
CVE-2022-47605
Custom 404 Pro <= 3.7.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-47158
alfred24 Click & Collect <= 1.1.7 - Authenticated (Administrator+) Stored Cross Site Scripting
Low
CVE-2023-22687
Freesoul Deactivate Plugins <= 1.9.4.0 - Information Disclosure
Medium
CVE-2022-47598
WP Super Popup <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-22677
WP Booklet <= 2.1.8 - Authenticated (Subscriber+) Remote Code Execution
Medium
eedced7b-bda4-4292-8e87-fc3e37e4868b
GamiPress – Button <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0236
Tutor LMS <= 2.0.9 - Reflected Cross-Site Scripting
High
CVE-2023-0174
WP VR <= 8.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0170
Html5 Audio Player <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23491
Quick Event Manager <= 9.7.4 - Reflected Cross-Site Scripting
High
CVE-2022-4677
Leaflet Maps Marker < 3.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-0176
Giveaways and Contests by RafflePress <= 1.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.