High
CVE-2022-37405
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-38059
Access Code Feeder <= 1.0.3 - Missing Authorization
Medium
CVE-2022-35725
wp-forecast <= 7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-50945
3dady real-time web stats <= 1.0 - Authenticated (Administrator+) Stored Cross Site Scripting
High
CVE-2022-3119
OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) <= 3.0.3 - Missing Authorization
Medium
CVE-2022-2546
All-in-One WP Migration <= 7.62 - Unauthenticated Reflected Cross-Site Scripting
Medium
CVE-2022-1591
WordPress Ping Optimizer <= 2.35.1.2.3 - Cross-Site Request Forgery
Medium
CVE-2022-2709
Float to Top Button <= 2.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2958
BadgeOS <= 3.7.1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-2763
WP Socializer – Simple & Easy Social Media Share Icons <= 7.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
dc5050dc-39de-4544-bf51-0927b2972d34
WP Cerber Security <= 9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2575
WBW Currency Switcher <= 1.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
bcaf9b92-5e59-47c5-a04e-3ef5c53a2640
Tutor LMS – eLearning and online course solution 2.0.0-2.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2022-2655
Classified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting
Medium
b899ca76-d6f4-4369-8f66-738b144433b7
Analytify – Google Analytics Dashboard For WordPress <= 4.2.2 - Authorization Bypass
High
b56a5ff2-10cb-4eee-9409-7f8a22d00358
WP Hotel Booking <= 2.0.0 - Missing Authorization to Settings Update
Medium
CVE-2022-35726
Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.8 - Missing Authorization
Medium
CVE-2022-2863
Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal
Medium
CVE-2022-2945
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal
Medium
CVE-2022-2943
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read
High
CVE-2022-33142
Better Messages <= 1.9.10.57 - Resource Exhaustion
Medium
CVE-2022-2941
WP-UserOnline <= 2.88.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2654
Classima < 2.1.11 - Reflected Cross-Site Scripting
Medium
CVE-2022-36282
Search Exclude <= 1.2.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.