Medium
CVE-2022-4242
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-45807
WP Mail Log <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2022-45826
Sunshine Photo Cart <= 2.9.13 - Missing Authorization
Medium
CVE-2022-4212
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf
Medium
CVE-2022-4220
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion
Medium
CVE-2022-4217
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key
Medium
CVE-2022-4214
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip
High
CVE-2022-40692
Sunshine Photo Cart <= 2.9.13 - Cross-Site Request Forgery
Medium
CVE-2022-4267
Bulk Delete Users by Email <= 1.2 - Reflected Cross-Site Scripting
High
CVE-2022-4266
Bulk Delete Users by Email <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2022-4211
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf
Medium
CVE-2022-4208
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef
Medium
CVE-2022-45811
Post Teaser <= 4.1.5 - Missing Authorization
Medium
CVE-2022-4218
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Arbitrary Quiz Deletion and Copying
Medium
CVE-2022-4226
Simple Basic Contact Form <= 20220207 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-45822
Advanced Booking Calendar <= 1.7.1 - Unauthenticated SQL Injection
Critical
CVE-2022-42888
ARMember Premium <= 5.5.1 - Privilege Escalation
Medium
CVE-2022-45832
Attorney <= 3 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2022-3679
Starter Templates by Kadence WP <= 1.2.16 - Authenticated (Admin+) PHP Object Injection
High
CVE-2022-45824
Advanced Booking Calendar <= 1.7.1 - Cross Site Request Forgery
Medium
CVE-2022-3840
Google Apps Login <= 3.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
fa7ca972-ddb0-416b-8c5a-b4e9648ca957
Booster for WooCommerce <= 5.6.8 - Cross-Site Request Forgery
Medium
CVE-2022-44582
Apptivo Business Site CRM <= 3.0.12 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-4140
Welcart e-Commerce 2.6.10-2.8.4 - Information Disclosure via Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.