Critical
CVE-2022-4305
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-4467
Search & Filter <= 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4303
WP Limit Login Attempts <= 2.6.4 - IP Spoofing to Protection Mechanism Bypass
High
CVE-2022-3425
Google Analyticator <= 6.5.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4542
Compact WP Audio Player <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-4230
WP Statistics <= 13.2.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-4485
Page-list <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4625
Login Logout Menu <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4675
Mongoose Page Plugin <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4383
CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQL Injection
Medium
CVE-2022-4474
Easy Social Feed <= 6.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4307
Pardakht Delkhah <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4672
WordPress Simple PayPal Shopping Cart <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4673
Rate my Post – WP Rating System <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4746
FluentAuth <= 1.0.1 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-4718
Landing Page Builder <= 1.4.9.8.9 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2022-4668
Easy Appointments <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-3811
EU Cookie Law <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2022-4060
User Post Gallery - UPG <= 2.19 - Missing Authorization to Remote Command Execution
Medium
CVE-2022-4832
Store Locator WordPress <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4547
Conditional Payment Methods for WooCommerce <= 1.0 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-4576
Easy Bootstrap Shortcode <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4549
Tickera <= 3.4.9.9 - Cross-Site Request Forgery to Plugin Data Deletion & Settings Changes
Medium
CVE-2022-4199
Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.