Medium
CVE-2022-45844
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-4972
Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export
High
CVE-2022-3994
Authenticator <= 1.3.0 - Missing Authorization
High
61992821-a053-4bc6-853a-1a826d096746
Uncanny Toolkit for LearnDash <= 3.6.3 - Cross-Site Request Forgery
Medium
5cc590fe-94c8-47cc-bd5b-eef70da138b1
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.7 - Open Redirect
High
1647ac13-d9d1-46ae-93e7-855f55160e03
Organization chart <= 1.4.1 - Cross-Site Request Forgery
Medium
CVE-2022-44735
WP Clictracker <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
80b5ca3d-d651-4c8a-8c64-6938d4a03710
Kenta Gutenberg Blocks <= 1.0.7 - Missing Authorization
High
CVE-2022-4047
Return Refund and Exchange For WooCommerce <= 4.0.8 - Arbitrary File Upload
Medium
CVE-2022-44632
Content Repeater – Custom Posts Simplified <= 1.1.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-44742
Community Events <= 1.4.8 - Authenticated (Administrator+) Stored Cross Site Scripting
Medium
CVE-2022-4112
Quizlord <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-45842
WP ULike <= 4.6.4 - Race Condition
Medium
CVE-2022-45839
Better Click To Tweet <= 5.10.3 - Missing Authorization
Medium
CVE-2022-45848
Contest Gallery <= 13.1.0.9 - Cross-Site Scripting
Medium
CVE-2022-45849
Activello <= 1.4.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2022-45358
Activello <= 1.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-45843
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-45845
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2022-44589
miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes
High
CVE-2022-45846
Image Map Pro < 5.6.9 - Cross-Site Request Forgery
High
CVE-2022-45850
Image Map Pro < 5.6.9 - Cross-Site Request Forgery
Medium
CVE-2022-45852
WP-FormAssembly <= 2.0.5 - Authenticated (Contributor+) Arbitrary File Read
High
CVE-2022-44581
Defender Security <= 3.3.2 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.