Medium
CVE-2022-2171
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-2170
Microsoft Advertising Universal Event Tracking (UET) <= 1.0.3 - Authenticated Stored Cross-Site Scripting
Medium
741ad2f5-d5cf-44bc-ac4a-7894df77a3d1
Keep Backup Daily <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-1906
Copyright Proof <= 4.16 - Reflected Cross-Site Scripting
Medium
1917eabd-0ba2-4878-87ea-8c0c9c00b6f5
Shortcode For Current Date <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-2328
Flexi Quote Rotator <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
e9c81117-a9da-41bb-afc6-94196167af04
Social Share Buttons by Supsystic <= 2.2.6 - SQL Injection
Medium
CVE-2022-2413
Slide Anything – Responsive Content / HTML Slider and Carousel <= 2.3.46 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
98c9c9cb-ca35-461e-9ca6-733012332fd6
MakeStories (for Web Stories) <= 2.6.4 - Cross-Ste Scripting
Medium
7e697e7f-8d5b-4a9f-9148-f2dc5fb1ba38
Web and WooCommerce Addons for WPBakery Builder <= 1.4.4.1 - Missing Authorization Checks
Medium
7cfeed0f-ab3e-4b35-9b69-08cc7e7ffb45
Flexi Quote Rotator <= 0.9.4 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2022-33965
WP Visitor Statistics (Real Time Traffic) <= 5.7 - Unauthenticated SQL Injection
High
CVE-2022-2273
Simple Membership <= 4.1.2 - Membership Privilege Escalation
Medium
6ac3b00e-26f2-471d-a682-6cb4939e819e
WP PayPal <= 1.2.3.8 - Cross-Site Scripting
Medium
611b88f4-96ae-47e4-8642-e09bee333468
Royal Custom CSS for Page and Post <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-34658
Download Manager <= 3.2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2022-2317
Simple Membership <= 4.1.2 - Membership Privilege Escalation
Medium
CVE-2022-2181
Advanced WordPress Reset <= 1.5 - Reflected Cross-Site Scripting
High
CVE-2022-2444
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Medium
d7bee25e-7574-4d3d-ad58-9b30d99de525
LearnPress – WordPress LMS Plugin <= 4.1.6.7 - Reflected Cross-Site Scripting
High
CVE-2022-2256
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
High
CVE-2022-2443
FreeMind WP Browser <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-0598
Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2278
Featured Image from URL (FIFU) <= 4.0.0 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.