High
CVE-2022-38144
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-4023
3DPrint <= 3.5.6.8 - Cross-Site Request Forgery to Arbitrary File Download
Medium
CVE-2022-2629
Top Bar <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-36356
Culture Object <= 4.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3124
Frontend File Manager <= 21.2 - Missing Authorization
Medium
CVE-2022-3128
Donation Thermometer <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-38068
Export Post Info <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
7a0c6425-866d-4b50-b464-87a8173c4abd
WP Statistics <= 13.2.5 - Information Disclosure
High
CVE-2022-3125
Frontend File Manager <= 21.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2022-33177
Booking Calendar <= 9.2.1 - Cross-Site Request Forgery
Medium
CVE-2022-3132
Goolytics – Simple Google Analytics <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2753
Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-31474
BackupBuddy 8.5.8.0 - 8.7.4.1 - Arbitrary File Download
Medium
CVE-2022-3144
Wordfence Security – Firewall & Malware Scan <= 7.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
59b63a01-fd8b-4742-a52f-c0a7b59e9e04
Frontend File Manager <= 21.3 - Cross-Site Request Forgery to Plugin Settings Update
High
CVE-2022-45847
WordPress Countdown Widget <= 3.1.9.1 - Cross-Site Request Forgery to Plugin Settings Update
Medium
259ed1a0-1bfa-4d38-845c-e5655c330702
WordPress Countdown Widget <= 3.1.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2022-2754
Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated SQL Injection
Medium
CVE-2022-2404
WP Popup Builder <= 1.2.8 - Reflected Cross-Site Scripting
High
CVE-2022-2405
WP Popup Builder <= 1.2.9 - Missing Authorization and Cross-Site Request Forgery
High
CVE-2022-2903
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.12 - Authenticated (Administrator+) PHP Objection Injection
High
CVE-2022-3098
Login Block IPs <= 1.0.0 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2022-2352
Post SMTP <= 2.1.6 - Authenticated (Administrator+) Blind Server-Side Request Forgery
High
CVE-2022-38093
All in One SEO <= 4.2.3.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.