Medium
CVE-2022-2536
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-2942
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Cross-Site Request Forgery to Settings update
High
CVE-2022-3747
Becustom <= 1.0.5.2 - Cross-Site Request Forgery
Critical
CVE-2022-3856
Comic Book Management System < 2.2.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-3991
Photospace Gallery <= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-3240
Follow Me Plugin <= 3.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-2940
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-3858
Floating Chat Widget - Chaty <= 3.0.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-3846
Workreap < 2.6.3 - Insecure Direct Objection Reference to Private Message Disclosure
High
CVE-2022-26366
AdRotate Banner Manager <= 5.9 - Cross-Site Request Forgery
Medium
CVE-2022-44630
YITH plugins by YITHEMES <= (Various Versions) - Cross-Site Request Forgery
Medium
CVE-2022-3922
Broken Link Checker <= 1.11.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-45075
Activity Reactions For Buddypress <= 1.0.22 - Missing Authorization
High
CVE-2022-1540
PostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2022-44736
Chameleon <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
b948574a-0aab-4596-83e6-04be21f78bc1
YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization
Medium
CVE-2022-45081
Add Multiple Marker <= 1.2 - Missing Authorization Checks to Settings Update
High
CVE-2022-45080
Add Multiple Marker <= 1.2 - Cross-Site Request Forgery
High
CVE-2022-45074
Activity Reactions For Buddypress <= 1.0.22 - Cross-Site Request Forgery
Medium
CVE-2022-3837
Uji Countdown <= 2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3838
WPUpper Share Buttons <= 3.42 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3830
WP Page Builder <= 1.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3907
Clerk <= 3.8.2 - Authorization Bypass via Insufficient Validation
Medium
CVE-2022-3426
Advanced WP Columns <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.