Medium
CVE-2022-37407
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
8d65b779-717b-4efc-b13d-acdf83ca1e63
Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting
High
CVE-2022-36292
Gallery PhotoBlocks <= 1.2.8 - Cross-Site Request Forgery
Medium
CVE-2022-36341
AS – Create Pinterest Pinboard Pages <= 1.0 - Authenticated Options Change to Stored Cross-Site Scripting
High
CVE-2022-36394
Contest Gallery <= 17.0.4 - Authenticated (Author+) SQL Injection
High
CVE-2022-40217
WPide <= 2.6 - Authenticated (Administrator+) Arbitrary File Upload
Medium
9f699d49-738f-49f0-ab1a-f43645a32c90
Social Slider Feed <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
9d604200-91b0-4885-8fe2-1323b9d6fed5
WooCommerce Payments <= 4.5.0 - Payment Bypass
High
74841c33-83fa-465e-a5a9-88c34bbc9f6c
Floating Action Button <= 1.2 - Missing Authorization
Medium
CVE-2022-36405
amCharts: Charts and Maps <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-35235
WPide <= 2.6 - Authenticated (Administrator+) Arbitrary File Read
Medium
31496229-bf54-466c-a87b-cc32e65500a4
WP Database Backup <= 5.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-35275
Advanced Order Export For WooCommerce <= 3.3.1 - Reflected Cross-Site Scripting
High
CVE-2022-1123
Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) <= 3.12.4 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-50946
Netroics Blog Posts Grid <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
cd6f4f0d-0e70-459a-8f09-64d1f6f8bb7e
BuddyForms ACF <= 1.3.8 - Authenticated (Contributor+) Cross-Site Scripting
High
ad953bc7-5747-4936-b702-37386299369e
Pop-up <= 1.1.1 - Missing authorization to Settings Change
Medium
CVE-2022-2669
WP Taxonomy Import <= 1.0.5 - Reflected Cross-Site Scripting
High
CVE-2022-2718
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby
High
CVE-2022-2717
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby
Medium
CVE-2022-2373
Simply Schedule Appointments <= 1.5.7.5 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2022-2374
Simply Schedule Appointments <= 1.5.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1663
Stop Spam Comments <= 0.2.1.2 - Protection Mechanism Bypass
High
52daa230-1600-4ace-9adf-3f4e9be51e9f
Jupiter X Core <= 2.0.9 - Missing Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.