High
CVE-2022-3416
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-3417
WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4320
connectDaily <= 1.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-4394
iPages Flipbook <= 1.4.6 - Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4619
Sidebar Widgets by CodeLights <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-4310
Slimstat Analytics <= 4.9.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4196
Multi Step Form <= 1.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4374
Bg Bible References <= 3.8.14 - Reflected Cross-Site Scripting
Medium
f28feb11-7e28-4b97-b529-f6d266c3e534
Formidable Forms <= 5.5.4 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2022-4393
ImageLinks Interactive Image Builder for WordPress <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-46862
Quiz And Survey Master <= 8.0.7 - Cross-Site Request Forgery
Medium
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Medium
CVE-2022-4664
Logo Slider <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4392
iPanorama 360 WordPress Virtual Tour Builder <= 1.6.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4391
Vision Interactive <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4479
Table of Contents Plus <= 2106 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3923
ActiveCampaign for WooCommerce <= 1.9.7 - Cross-Site Request Forgery
Medium
CVE-2022-45806
Formidable Form Builder <= 5.5.4 - Cross-Site Request Forgery
High
CVE-2022-46859
Spiffy Calendar <= 4.9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2022-4103
Royal Elementor Addons <=1.3.55 - Missing Authorization to Subscriber+ Arbitrary Post Creation
Medium
CVE-2022-4368
WP CSV <= 1.8.0.0 - Reflected Cross-Site Scripting
High
CVE-2022-4102
Royal Elementor Addons <=1.3.55 - Authenticated (Subscriber+) Arbitrary Post Deletion
Medium
15d479e7-f0b8-4175-84b0-cd611b73233a
Portfolio – WordPress Portfolio Plugin <= 2.8.8 - Cross-Site Request Forgery in rtport_spare_me
High
CVE-2022-47163
WP CSV to Database <= 2.6 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.