Medium
CVE-2022-45851
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-45838
ARForms Form Builder <= 1.5.6 - Unauthenticated Cross-Site Scripting
Medium
CVE-2022-3985
Videojs HTML5 Player <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-44737
All In One WP Security & Firewall <= 5.1.0 - Cross-Site Request Forgery
Critical
CVE-2022-45359
Yith WooCommerce Gift Cards Premium <= 3.19.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-3983
Checkout for PayPal <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-3986
WP Stripe Checkout <= 1.2.2.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-3937
Easy Video Player <= 1.2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-3987
Responsive Lightbox2 <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-3984
Flowerplayer Video Player <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4107
SMSA Shipping for WooCommerce <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2022-3981
Icegram Express <= 5.4.19 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-45353
Betheme <= 26.6.2 - Missing Authorization Checks to Private Page/Post Data Disclosure
Medium
CVE-2022-3999
WooCommerce Shipping – DPD baltic <= 1.2.54 - Missing Authorization to Arbitrary Options Deletion
Medium
CVE-2022-4097
All-In-One Security (AIOS) – Security and Firewall <= 5.0.8 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-3919
Jetpack CRM <= 5.4.2 - Authenticated (Administrator+) Cross-Site Scripting
Medium
d592b81d-48c7-4b48-948d-f2b98719fdfc
Minimal Coming Soon – Coming Soon Page <= 2.33 - Authenticated (Administrator+) Cross-Site Scripting
Critical
CVE-2022-3989
Motors – Car Dealer, Classifieds & Listing <= 1.4.3 - Unauthenticated Arbitrary File Upload
High
CVE-2022-3912
User Registration <= 2.2.4 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2022-45356
Betheme <= 26.6.2 - Missing Authorization Check on Core Functionality
Medium
CVE-2022-3946
Welcart e-Commerce <= 2.8.3 - Missing Authorization
Medium
CVE-2022-3862
Livemesh Addons for Elementor <= 7.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3935
Welcart e-Commerce <= 2.8.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2022-45351
Betheme <= 26.6.2 - Missing Authorization to Post Status Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.