Medium
332b8d96-89b2-473b-9186-239e49f5b064
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-2537
WooCommerce PDF Invoices & Packing Slips 2.14.0 - 3.0.0 - Reflected Cross-Site Scripting
High
CVE-2022-2261
WPIDE – File Manager & Code Editor <= 2.6 - Authenticated (Admininstrator+) Local File Inclusion
Medium
CVE-2022-2267
Mailchimp for WooCommerce <= 2.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2022-2556
Mailchimp for WooCommerce <= 2.7.1 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2022-2559
Fluent Support <= 1.5.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-38703
MaxButtons <= 9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-36346
WordPress Button Plugin MaxButtons <= 9.2 - Cross-Site Request Forgery
High
CVE-2021-36852
WP Hotel Booking <= 1.10.5 - Cross-Site Request Forgery
Medium
CVE-2022-36371
My Calendar <= 3.3.16 - Open Redirect
High
CVE-2022-2233
Banner Cycler <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2021-36861
Rich Reviews by Starfish <= 1.9.14 - Cross-Site Request Forgery
High
CVE-2022-36288
Download Manager <= 3.2.48 - Cross-Site Request Forgery
Medium
391d65a7-1675-4eae-b129-a1208cd95669
Social Slider Feed <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-34347
Download Manager <= 3.2.48 - Cross-Site Request Forgery to Plugin Settings Update
Critical
CVE-2022-36296
ActiveDEMAND <= 0.2.27 - Missing Authorization Checks
Critical
CVE-2022-34149
WP OAuth Server <= 3.0.4 - Authentication Bypass
Medium
CVE-2022-2362
Download Manager <= 3.2.49 - IP Blocking Bypass
Medium
eb828160-b537-4435-9d85-47e0d70a6704
Remove tabs and fields from WooCommerce <= 1.68 - Reflected Cross-Site Scripting
High
e2e2f446-5391-4189-8c9c-3be2459808d0
Social Slider Feed <= 2.0.4 - Missing Authorization
Medium
e012d7a0-46f9-4f3b-a178-2d06655fd441
External url as post Featured Image <= 2.02 - Reflected Cross-Site Scripting
Medium
CVE-2022-2198
WPQA - Builder forms Addon For WordPress < 5.7 - Information Disclosure
High
CVE-2022-2276
WP Edit Menu < 1.5.0 - Missing Authorization to Post Deletion
High
dc2532b4-907f-438b-baab-c3966cf30f74
Student Result or Employee Database <= 1.7.9 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.