High
79ef7b33-ea6b-4cf2-bed4-8177927ab650
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-45067
Exclusive Addons for Elementor <= 2.6.1 - Cross-Site Request Forgery
Medium
CVE-2022-4749
Posts List Designer by Category <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scriptiong via Shortcode
Medium
CVE-2023-0071
WP Tabs <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0074
WP Social Widget <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4837
CPO Companion <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4792
News & Blog Designer Pack <= 3.2 - Authenticated (Contributor+) Stored Cross-Site SQcripting via Shortcode
Critical
CVE-2023-0556
ContentStudio <= 1.2.5 - Missing Authorization
Medium
CVE-2023-0097
Post Grid, Post Carousel, & List Category Posts <= 2.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4496
SAML Single Sign On – SSO Login Premium Multisite < 20.0.7 - Open Redirect
Medium
CVE-2022-4831
Custom User Profile Fields <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0252
Contextual Related Posts <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute
Medium
CVE-2023-0403
Social Warfare <= 4.3.1 - Cross-Site Request Forgery
Medium
CVE-2022-4764
Simple File Downloader <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0162
CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4470
Widgets for Google Reviews < 9.8 - Authenticated (Contributor+) Stored XSS
Medium
CVE-2023-0402
Social Warfare <= 4.3.0 - Missing Authorization
Medium
CVE-2022-4649
WP Extended Search <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4776
CC Child Pages <= 1.42 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4654
Easy Pricing Tables <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4794
Amazon Affiliate <= 3.12.2 - Reflected File Download
Medium
de9a945b-31fb-4d0d-9dd1-23bcef1399c2
Show-Hide / Collapse-Expand <= 1.2.6 - Missing Authorization
Medium
CVE-2023-0446
My YouTube Channel <= 3.0.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4682
Lightbox Gallery <= 0.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.