Medium
CVE-2022-4759
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-4788
Embed PDF <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4395
Membership For WooCommerce <= 2.1.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-4829
Show-Hide / Collapse-Expand <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4783
Youtube Channel Gallery <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4472
Simple Sitemap <= 3.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4671
PixCodes <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-46820
Joli Table of Contents <= 1.3.9 - Cross-Site Request Forgery
Medium
CVE-2022-45830
Analytify <= 4.2.3 - Missing Authorization & Cross-Site Request Forgery
High
CVE-2023-0038
Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4828
Bold Timeline Lite <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
997b028c-8131-4579-8157-caecf099d7ec
Knowledge Base <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block
Medium
CVE-2022-4699
MediaElement.js – HTML5 Video & Audio Player <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4763
Icon Widget <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47145
WordPress Bitcoin Payments – Blockonomics <= 3.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-0033
PDF Viewer <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4765
Portfolio for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
462372ab-8f83-4b75-b3dd-674199e1eeee
Mailjet Email Marketing <= 5.3 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-4834
CPT Bootstrap Carousel <= 1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4663
Members Import <= 1.4.2 - Self Cross-Site Scripting
High
CVE-2022-47427
My Calendar <= 3.3.24.1 - Cross-Site Request Forgery
Medium
CVE-2022-4781
Accordion Shortcodes <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4323
Google Analyticator <= 6.5.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4017
Booster (<= 6.0.0), Booster Plus (<= 6.0.0), and Booster Elite (<= 6.0.0) for WooCommerce - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.