Medium
CVE-2022-2341
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-2187
Contact Form 7 Captcha <= 0.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-2222
Download Monitor <= 4.5.9 - Authenticated Arbitrary File Download
Critical
0a9b4c03-e7ec-48d6-87fe-67e8a5780703
a3 Responsive Slider <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
ba5d1bd4-da0d-43f4-b28f-4a4a2702b3b0
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.6.9 - Cross-Site Scripting
Medium
CVE-2022-0899
Header Footer Code Manager <= 1.1.23 - Cross-Site Scripting
Critical
CVE-2022-34858
OAuth 2.0 client for SSO <= 1.11.3 - Authentication Bypass
Critical
a10ba041-ded4-41d4-93ba-7fa7389acd54
WordPress OpenID Connect Client <= 2.1.7 - Authentication Bypass
Medium
9d72604e-23ef-4a69-8839-cf8ff4aef3bc
Download Manager <= 3.2.43 - Reflected Cross-Site Scripting
Medium
CVE-2022-2169
Loading Page with Loading Screen <= 1.0.82 - Cross-Site Scripting
Critical
5d07d5e9-be7c-4c16-b931-d909ed8be361
Login with WHMCS <= 1.11.3 - Authentication Bypass
High
e9303719-3d48-4a55-ac19-0c603801d458
Dropshipping and affiliates for Amazon and woocommerce <= 1.4.3 - Missing Authorization
Medium
e62a58ec-4ea5-4241-8148-fc8801bd59b3
Our Services Showcase <= 2.0 - Missing Authorization
High
CVE-2022-2039
Free Live Chat Support <= 1.0.11 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
d2b4203f-7301-4ab6-b7a1-c43516bea477
Football Live Scores <= 1.5 - Missing Authorization
Medium
bb2a67ff-a452-4ecb-9fd7-bf05fe43a2f7
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Cross-Site Scripting
Medium
a6b0b516-af5c-474a-a674-b52cf80207ec
Re:amaze Helpdesk & Live Chat <= 1.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2186
Simple Post Notes <= 1.7.5 - Subscriber+ Stored Cross-Site Scripting
Critical
7c3ae610-44ef-4354-b085-00c00a486dc9
Login with Cognito <= 1.4.6 - Authentication Bypass
Medium
CVE-2022-2118
404s <= 3.4.9 - Administrator+ Cross-Site Scripting
High
CVE-2022-2001
DX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
6a226790-0774-43f6-a476-a2dac7ae153b
Freshdesk (official) <= 2.3.6 - Cross-Site Request Forgery
High
CVE-2022-30337
WP Meta SEO <= 4.4.8 - Cross-Site Request Forgery to Settings Update
Medium
58a1f3a1-e00c-4b63-83ad-73205c67c0ac
eBay Dropshipping and Affiliate by Wooshark <= 1.5.6 - Unprotected AJAX Actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.