High
CVE-2022-47605
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-47158
alfred24 Click & Collect <= 1.1.7 - Authenticated (Administrator+) Stored Cross Site Scripting
Low
CVE-2023-22687
Freesoul Deactivate Plugins <= 1.9.4.0 - Information Disclosure
Medium
CVE-2022-47598
WP Super Popup <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-22677
WP Booklet <= 2.1.8 - Authenticated (Subscriber+) Remote Code Execution
Medium
eedced7b-bda4-4292-8e87-fc3e37e4868b
GamiPress – Button <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0236
Tutor LMS <= 2.0.9 - Reflected Cross-Site Scripting
High
CVE-2023-0174
WP VR <= 8.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0170
Html5 Audio Player <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23491
Quick Event Manager <= 9.7.4 - Reflected Cross-Site Scripting
High
CVE-2022-4677
Leaflet Maps Marker < 3.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-0176
Giveaways and Contests by RafflePress <= 1.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-23490
Survey Maker < 3.1.2 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2023-23488
Paid Memberships Pro < 2.9.8 - Unauthenticated SQL Injection
Medium
7c6b7dca-dd82-45b4-b9e2-0b44201396e9
GamiPress <= 2.5.0 - Cross-Site Request Forgery
High
CVE-2023-0254
Simple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-0178
Annual Archive <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-23489
Easy Digital Downloads < 3.1.0.4 - SQL Injection
High
CVE-2022-4824
WP Blog and Widget <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23492
Login with phone number <= 1.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-0171
jQuery T(-) Countdown Widget <= 2.3.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortocde
Critical
f0a261e9-8b96-4065-8fd3-7be53cc3c9a2
10Web Map Builder for Google Maps <= 1.0.72 - Unauthenticated SQL Injection
Medium
CVE-2023-0147
Flexible Captcha <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4836
Breadcrumb <= 1.5.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.