Medium
277942cb-f4ca-4197-8f61-2e0cb03115a6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-34650
Team <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
e8ac3187-b065-434e-9051-d13330dd3da5
Duplicate Page and Post <= 2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2152
Duplicate Page and Post <= 2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-34853
Team <= 1.2.6 - Authenticated (Contibutor+) Stored Cross-Site Scripting
High
37725a72-0478-4f56-b87f-e427b1f5fb58
Ninja Job Board – Ultimate WordPress Job Board Plugin <= 1.3.2 - Cross-Site Scripting
Medium
CVE-2022-36425
Beaver Builder <= 2.5.4.3 - Missing Authorization
Medium
CVE-2022-2635
Autoptimize <= 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Critical CSS Settings
High
CVE-2022-2381
E Unlocked - Student Result <= 1.0.4 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2022-2378
Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2022-2379
Easy Student Results <= 2.2.8 - Missing Authorization to Sensitive Information Disclosure
Medium
CVE-2022-2423
DW Promobar <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2473
WP-UserOnline <= 2.87.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-33191
Testimonials <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-30998
Homepage Product Organizer for WooCommerce <= 1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-2116
Contact Form DB - Elementor <= 1.7 - Reflected Cross-Site Scripting
Medium
321bfc32-a08d-46ea-98c8-c7be10905307
Web en Mantenimiento <= 1.0.6 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-2391
Inspiro Pro <= 7.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2022-2409
Rough Chart <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2412
Better Tag Cloud <= 0.99.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2361
WP Social Chat – Click To Chat App <= 6.0.4 - Administrator+ Stored Cross-Site Scripting
Medium
CVE-2022-2462
Transposh WordPress Translation <= 1.0.9.6 - Sensitive Information Disclosure
Medium
CVE-2022-2371
YaySMTP – Simple WP SMTP Mail <= 2.2 - Stored Cross-Site Scripting
High
CVE-2022-2046
Directorist <= 7.2.2 - Authenticated (Admin+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.