Medium
CVE-2022-45813
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Critical
CVE-2022-4357
LetsRecover <= 1.1.0 - Unauthenticated SQL Injection via AJAX action
Medium
CVE-2022-4109
Wholesale Market for WooCommerce < 2.0.0 - Authenticated (Administrator+) Arbitrary Log File Download
High
CVE-2022-46815
Conditional Shipping for WooCommerce <= 2.3.1 - Cross-Site Request Forgery
Medium
f29a843d-a8c5-4477-b7cc-620b19b5f585
Clearpay Gateway for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-46843
Woocommerce Vietnam Checkout <= 2.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-46802
Product Reviews Import Export for WooCommerce <= 1.4.8 - CSV Injection
Medium
CVE-2022-29416
Afterpay Gateway for WooCommerce <= 3.5.0 - Reflected Cross-Site Scripting
High
CVE-2022-4356
LetsRecover <= 1.1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2022-4355
LetsRecover <= 1.1.0 - Authenticated (Admin+) SQL Injection
High
CVE-2022-3860
Visual Email Designer for WooCommerce <= 1.7.1 - Authenticated (Author+) SQL Injection
Medium
CVE-2022-4363
Wholesale Market for WooCommerce <= 2.0.0 & Wholesale Market <= 2.2.1 - Cross-Site Request Forgery
Medium
CVE-2022-4329
Product list Widget for Woocommerce <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4227
Booster (<= 5.6.2), Booster Plus (< 6.0.0), and Booster Elite (< 6.0.0) for WooCommerce - Reflected Cross-Site Scripting
High
fa7ca972-ddb0-416b-8c5a-b4e9648ca957
Booster for WooCommerce <= 5.6.8 - Cross-Site Request Forgery
Medium
CVE-2022-41640
Wholesale Suite <= 2.1.5 - Authenticated (Subscriber+) Cross-Site Scripting
High
CVE-2022-4106
Wholesale Market for WooCommerce <= 1.0.6 - Unauthenticated Arbitrary File Download
Medium
CVE-2022-4108
Wholesale Market for WooCommerce <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Download
High
CVE-2022-4047
Return Refund and Exchange For WooCommerce <= 4.0.8 - Arbitrary File Upload
Critical
CVE-2022-45359
Yith WooCommerce Gift Cards Premium <= 3.19.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2022-4107
SMSA Shipping for WooCommerce <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2022-3999
WooCommerce Shipping – DPD baltic <= 1.2.54 - Missing Authorization to Arbitrary Options Deletion
Critical
CVE-2022-3915
Dokan <= 3.7.5 - Unauthenticated SQL Injection
Medium
CVE-2022-4016
Booster (<= 5.6.6), Booster Plus (<= 5.6.5), and Booster Elite (<= 1.1.7) for WooCommerce - Cross-Site Request Forgery leading to Arbitrary Custom Role Creation/Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.