High
CVE-2022-3764
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-3865
WP User Merger <= 1.5.2 - Authenticated (Admin+) SQL Injection
High
CVE-2022-44741
Testimonial Slider <= 1.3.1 - Cross-Site Request Forgery
Medium
CVE-2022-41839
LoginPress | Custom Login Page Customizer <= 1.6.2 - Missing Authorization to Settings Changes
High
CVE-2022-3849
WP User Merger <= 1.5.2 - Authenticated (Admin+) SQL Injection
High
CVE-2022-3490
Checkout Field Editor <= 1.7.2 - Authenticated (Admin+) PHP Object Injection
High
CVE-2022-3689
HTML Forms <= 1.3.24 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-44625
Cyklodev WP Notify <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3511
Awesome Support <= 6.1.1 - Insecure Direct Object Reference to (Subscriber+) Ticket Export
High
CVE-2022-3848
WP User Merger <= 1.5.2 - Authenticated (Admin+) SQL Injection
High
CVE-2022-3768
WPSmartContracts <= 1.3.11 - Authenticated (Author+) SQL Injection
Medium
CVE-2022-3836
Seed Social <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3824
WP Admin UI Customize <= 1.5.12 - Authenticated (Administrator+) Cross-Site Scripting
Medium
d99d7a26-3645-4ff5-8c48-17b6fa77a228
Responsive Lightbox & Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-3805
Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass
Medium
CVE-2022-3794
Jeg Elementor Kit <= 2.5.6 - Authorization Bypass
High
CVE-2022-2311
Find and Replace All <= 1.3 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
High
CVE-2022-3850
Find and Replace All <= 1.3 - Cross-Site Request Forgery to Arbitrary Content Replacement
Medium
CVE-2022-3822
Donations via PayPal <= 1.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3823
Beautiful Cookie Consent Banner <= 2.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3839
Analytics for WP <= 1.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3603
Export customers list csv for WooCommerce <= 2.0.67 - CSV Injection
High
CVE-2022-3852
VR Calendar <= 2.3.3 - Cross-Site Request Forgery
Medium
CVE-2022-3833
Fancier Author Box by ThematoSoup <= 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.