Medium
CVE-2022-4508
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filters
High
CVE-2022-4309
Subscribe2 <= 10.37 - Cross-Site Request Forgery
Medium
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Medium
CVE-2022-47150
Appsero <= 1.2.0 - Cross-Site Request Forgery
Medium
CVE-2022-45813
BeRocket Plugins <= (Various Versions) - Missing Authorization
Medium
CVE-2022-4042
Paytium <= 4.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-3981
Icegram Express <= 5.4.19 - Authenticated (Subscriber+) SQL Injection
High
CVE-2022-41134
Optinly <= 1.0.15 - Cross-Site Request Forgery
High
CVE-2022-41647
Optinly <= 1.0.18 - Missing Authorization to Plugin Settings Change
Medium
CVE-2022-36340
MailOptin <= 1.2.49.0 - Missing Authorization to Cache Deletion
Medium
CVE-2022-1889
Newsletter <= 7.4.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1756
Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting
Medium
6ebc1b85-4682-4467-b17c-9a35cc3f0f15
Shopping Cart & eCommerce Store <= 5.2.6 - Cross-Site Request Forgery
High
86f7eb83-8483-4c6b-993e-ce11084241e8
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
High
CVE-2022-0439
Email Subscribers & Newsletters <= 5.3.1 - Authenticated (or Cross-Site Request Forgery) Blind SQL Injection
Medium
CVE-2021-25033
WordPress Newsletter Plugin – Noptin < 1.6.5 - Open Redirect
Medium
CVE-2021-24874
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.30 - Reflected Cross-Site Scripting via lang & pid Parameters
Medium
CVE-2021-24923
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.24 - Reflected Cross-Site Scripting
Medium
CVE-2021-36845
YITH Maintenance Mode <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-36841
YITH Maintenance Mode <= 1.3.7 - Stored Cross-Site Scripting
Medium
CVE-2021-34658
Simple Popup Newsletter <= 1.4.7 - Reflected Cross-Site Scripting
High
CVE-2021-34634
Nifty Newsletters <= 4.0.23 – Cross-Site Request Forgery to Stored Cross-Site Scripting
High
9bb9bab2-4f47-41ed-b42e-5272981927a8
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.35.1 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.