Medium
35b46587-1c6e-4d3f-a8d0-e7797cee882d
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
2b072278-6627-42b2-a532-c8854c9a4921
Post Comments as bbPress Topics <= 2.2.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-2114
Data Tables Generator By Supsystic <= 1.10.19 - Cross-Site Scripting
Medium
CVE-2022-2041
Brizy Page Builder <= 2.4.1 - Authenticated Stored Cross-Site Scripting via Element Content
Medium
CVE-2022-2101
Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting
Medium
ae048156-f6a0-41c3-8853-ea439eac10a4
Power BI Embedded for WordPress <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
a8a3ba35-3cc0-4a6b-bb96-6ae5a83e5ad6
MainWP Dashboard <= 4.2.4.1 - Cross-Site Request Forgery
Medium
CVE-2022-1933
CDI – Collect and Deliver Interface for Woocommerce <= 5.1.9 - Multiple Cross-Site Scripting
Medium
CVE-2022-2148
LinkedIn Company Updates <= 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-2151
Best Contact Management Software <= 3.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2040
Brizy Page Builder <= 2.4.1 - Authenticated Stored Cross-Site Scripting via Element URL
Medium
CVE-2022-2149
Very Simple Breadcrumb <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2146
Import CSV Files <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2022-2123
WP Opt-in <= 1.4.1 - Cross-Site Request Forgery to Settings Update
Medium
d3004699-3285-426a-8a85-33be6c0c0b6f
Print My Blog – Print, PDF, & eBook Converter <= 3.15.8 - Unprotected AJAX Actions
High
CVE-2022-2091
Cache Images <= 3.2 - Cross-Site Request Forgery to Image Upload
Medium
CVE-2022-1894
Popup Builder <= 4.1.10 - Authenticated (Admin+) Cross-Site Scripting
Medium
94df820c-cafb-4a43-ace1-ec396b1ae6c5
Cache Images <= 3.2 - Missing Authorization
High
CVE-2022-1576
WP Maintenance Mode & Coming Soon <= 2.4.4 - Cross-Site Request Forgery
Medium
CVE-2022-2093
WP Duplicate Page <= 1.2 - Authenticated (Admin+) Stored Cross Site Scripting
Medium
CVE-2022-1599
Admin Management Xtended <= 2.4.4 - Cross-Site Request Forgery to Post Status Update
Medium
27cfd3cd-e622-4be7-af47-84324d6f6ea3
Analytify <= 4.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-0150
WP Accessibility Helper <= 0.6.0.6 - Reflected Cross-Site Scripting via wahi
Medium
CVE-2022-2089
Bold Page Builder <= 4.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.