Medium
CVE-2022-43500
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
38979e27-2023-4f84-a708-1732b4117066
WordPress Core < 6.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Customizer
Medium
CVE-2022-3469
WP Attachments <= 5.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
2f0d4f48-a315-4308-a5b6-7d3f045b292f
WordPress Core < 6.0.3 - Information Disclosure (Multi-Part Email Leak)
Medium
19c88a9a-1f97-4a46-b759-9ca030d577e7
WordPress Core < 6.0.3 - Open Redirect
Low
0fcdfba2-aa19-4d0c-8880-5ee2c0680555
WordPress Core < 6.0.3 - Shared User Instance Weakness
Medium
ed42e29f-d263-43fc-b06e-b7aaaa7622f7
eCommerce Product Catalog <= 3.0.71 - Reflected Cross-Site Scripting
Medium
CVE-2022-3418
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2022-2387
Easy Digital Downloads <= 2.11.7 - Cross-Site Request Forgery to Arbitrary Post Deletion
Critical
CVE-2022-3481
WooCommerce Dropshipping Premium <= 4.3 - Unauthenticated SQL Injection
Medium
bdb8cb7f-38fc-41d7-aa78-abe11c6402b6
Mihdan: Public Post Preview <= 1.9.9 - Missing Authorization
High
CVE-2022-2441
ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to Remote Command Execution
High
CVE-2022-3463
Contact Form Plugin by FluentForm <= 4.3.12 - CSV Injection
High
84c4e3cc-1f7c-4ed9-9072-32f3e84419c9
Booking Calendar – Event Calendar <= 1.0.2 - Missing Authorization
Critical
CVE-2022-3536
Role Based Pricing for WooCommerce <= 1.6.2 - Missing Authorization to PHAR Deserialization
High
CVE-2022-3537
Role Based Pricing for WooCommerce <= 1.6.1 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2022-3494
Complianz Free <= 6.3.3 & Premium <= 6.3.5 - SQL Injection via Translations
Medium
56abcad2-5be0-422c-a33f-91bc123364e5
eCommerce Product Catalog <= 3.0.71 - Reflected Cross-Site Scripting
High
CVE-2022-3558
Import and export users and customers <= 1.20.4 - Authenticated (Subscriber+) CSV Injection
High
CVE-2022-3489
WP Hide <= 0.0.2 - Missing Authorization to Settings Update
Medium
CVE-2022-2711
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal
High
CVE-2022-3451
Product Stock Manager < 1.0.5 - Missing Authorization and Cross-Site Request Forgery
High
0593311a-54d7-42b2-ad5e-185938b42452
Portfolio Gallery <= 1.0 - Missing Authorization
Medium
CVE-2022-3462
Highlight Focus <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.