High
CVE-2022-4356
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2022-4049
WP User <= 7.0 - Unauthenticated SQL Injection
High
CVE-2022-4355
LetsRecover <= 1.1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2022-4359
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2022-4358
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2022-4360
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2022-4324
Custom Field Template <= 2.5.7 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4369
WP-Lister Lite for Amazon <= 2.4.2 - Reflected Cross-Site Scripting
High
CVE-2022-3860
Visual Email Designer for WooCommerce <= 1.7.1 - Authenticated (Author+) SQL Injection
Medium
fdd14863-5498-4598-8b22-8e5a607869e4
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.10 - Authenticated (Admin+) Cross-Site Scripting
Critical
CVE-2022-4099
Joy Of Text Lite – SMS messaging for WordPress <= 2.3.0 - Unauthenticated SQL Injection
Medium
CVE-2022-4351
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-4352
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-4302
White Label CMS <= 2.4 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4363
Wholesale Market for WooCommerce <= 2.0.0 & Wholesale Market <= 2.2.1 - Cross-Site Request Forgery
Medium
90c0e937-19fd-484e-a50f-42b00a6eeb30
Moosend Website Connector <= 1.0.189 - Missing Authorization
Medium
CVE-2022-4329
Product list Widget for Woocommerce <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4200
Login with Cognito <= 1.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
c4039a27-0100-49c5-8dce-cf015a08ef04
ContentStudio <= 1.1.8 - Missing Authorization
Medium
CVE-2022-45814
WP Calendar <= 1.5.3 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-38055
wpForo Forum <= 2.0.9 - Authenticated (Subscriber+) HTML Injection
Medium
CVE-2022-4340
BookingPress <= 1.0.30 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2022-45817
GC Testimonials <= 1.3.2 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-4198
WP Social Sharing <= 2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.