Medium
CVE-2022-4426
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-4674
Ibtana – WordPress Website Builder <= 1.1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4431
WOOCS <= 1.3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-4481
Mesmerize Companion <= 1.6.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-45820
LearnPress <= 4.1.7.3.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-4477
Smash Balloon Social Post Feed <= 4.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4325
Post Status Notifier Lite <= 1.10.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4476
Download Manager <= 3.2.61 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4468
WP Recipe Maker <= 8.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4497
Jetpack CRM <= 5.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-3416
WPtouch <= 4.3.44 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2022-3417
WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4320
connectDaily <= 1.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-4394
iPages Flipbook <= 1.4.6 - Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4619
Sidebar Widgets by CodeLights <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-4310
Slimstat Analytics <= 4.9.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4196
Multi Step Form <= 1.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4374
Bg Bible References <= 3.8.14 - Reflected Cross-Site Scripting
Medium
f28feb11-7e28-4b97-b529-f6d266c3e534
Formidable Forms <= 5.5.4 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2022-4393
ImageLinks Interactive Image Builder for WordPress <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-46862
Quiz And Survey Master <= 8.0.7 - Cross-Site Request Forgery
Medium
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Medium
CVE-2022-4664
Logo Slider <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4392
iPanorama 360 WordPress Virtual Tour Builder <= 1.6.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.