Medium
CVE-2022-4553
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
7a5ab5f1-db14-4448-9186-35a5f382cd1a
MDTF – Meta Data and Taxonomies Filter <= 1.3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4872
WooCommerce Chained Products < 2.12.0 - Missing Authorization to Arbitrary Options Update
Medium
6b6ab7bc-e815-4b3f-bda1-dd816ca457cd
Twitter Cards Meta <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4835
Social Sharing Toolkit <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4793
Blog Designer - Post and Widget <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
63f1c60f-8f72-4c99-92af-340c67b7411f
Logaster Logo Generator <= 1.3 - Missing Authorization to Arbitrary Media Deletion and Creation
Medium
CVE-2022-4680
Revive Old Posts <= 9.0.10 - Authenticated (Admin+) PHP Object Injection
Medium
62559fd6-a338-4f0f-ab1a-33fffbdc687e
WordPress RSS Feed Retriever <= 1.6.7 - Cross-Site Request Forgery
Medium
CVE-2022-4785
Video Sidebar Widgets <= 6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4787
Themify Shortcodes <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0447
My YouTube Channel <= 3.0.12.1 - Missing Authorization
Medium
CVE-2022-47440
My Tickets <= 1.9.10 - Cross-Site Request Forgery
Medium
CVE-2022-4759
GigPress <= 2.3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4788
Embed PDF <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4395
Membership For WooCommerce <= 2.1.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-4829
Show-Hide / Collapse-Expand <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4783
Youtube Channel Gallery <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4472
Simple Sitemap <= 3.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4671
PixCodes <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-46820
Joli Table of Contents <= 1.3.9 - Cross-Site Request Forgery
Medium
CVE-2022-45830
Analytify <= 4.2.3 - Missing Authorization & Cross-Site Request Forgery
High
CVE-2023-0038
Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4828
Bold Timeline Lite <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.