Medium
CVE-2022-4474
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-4307
Pardakht Delkhah <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4672
WordPress Simple PayPal Shopping Cart <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4673
Rate my Post – WP Rating System <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4746
FluentAuth <= 1.0.1 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-4718
Landing Page Builder <= 1.4.9.8.9 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2022-4668
Easy Appointments <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-3811
EU Cookie Law <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2022-4060
User Post Gallery - UPG <= 2.19 - Missing Authorization to Remote Command Execution
Medium
CVE-2022-4832
Store Locator WordPress <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-4547
Conditional Payment Methods for WooCommerce <= 1.0 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-4576
Easy Bootstrap Shortcode <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4549
Tickera <= 3.4.9.9 - Cross-Site Request Forgery to Plugin Data Deletion & Settings Changes
Medium
CVE-2022-4199
Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4507
Real Cookie Banner <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4295
Show All Comments <= 7.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4653
Greenshift – animation and page builder blocks <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4464
Themify Portfolio Post <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4544
Social Media Share Buttons <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-4651
Justified Gallery <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4000
Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery
Medium
CVE-2022-4655
Welcart e-Commerce <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
787a19cf-a553-4aec-96c5-978956826756
WP Spell Check <= 9.12 - Cross-Site Request Forgery
High
CVE-2023-28663
Formidable PRO2PDF <= 3.09 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.