Medium
abc14a00-5560-440b-a5ba-4ff41a6c54c3
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2022-1846
Tiny Contact Form <= 0.7 - Cross-Site Request Forgery
Medium
a31ab564-48b7-44f7-a1da-226222c3fd7b
Cookie Params <= 0.2 - Reflected Cross-Site Scripting and Cross-Site Request Forgery
High
a0b1e907-0c31-4b40-b3f9-0ac665f3394a
Smartkit <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
985fd6a4-282a-48e9-9149-69e6ee794667
Booster for WooCommerce <= 5.5.8 - Reflected Cross-Site Scripting
High
CVE-2022-1539
Exports and Reports <= 0.9.1 - CSV Injection
Medium
8945128b-79b7-46c7-b981-78e6619d3f63
WPSID Shortcode <= 1.0.9.2 - Open Redirect
Medium
CVE-2022-1845
WP Post Styling <= 1.3.0 - Cross-Site Request Forgery
High
7b6557de-fd4f-4172-ad7d-940f9f3ea2db
Running Line <= 1.2 - Cross-Site Request Forgery to Settings Update
Medium
7870badf-a1c8-4a47-adac-d6535ab81d79
CURCY <= 2.1.17 - Reflected Cross-Site Scripting
High
CVE-2022-1844
WP Sentry <= 1.0 - Cross-Site Request Forgery
High
6971eea0-9d0b-4a7f-be05-001c34770c2f
Ping List Pro <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2022-1969
Mobile browser color select <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2022-1847
Rotating Posts <= 1.11 - Cross-Site Request Forgery to Settings Update
Medium
5a418687-7359-4ebf-8912-2c9f511fe46d
Weberino Timed Quiz <= 0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
4b430f98-255b-454f-97f5-2d2c9a572225
Germanized for WooCommerce <= 3.9.4 - Reflected Cross-Site Scripting
Medium
3839257c-4ba2-442a-8d47-dd5c1e5561a8
Automatic Domain Changer <= 2.0.2 - Reflected Cross-Site Scripting
Medium
33707b80-5cc1-4678-bf87-8c5131634c94
Video Conferencing with Zoom <= 3.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-1961
Google Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID
High
CVE-2022-1749
WPMK Ajax Finder <= 1.0.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
099c8e23-31e3-47de-a33a-fe5812ca14d3
Spectra – WordPress Gutenberg Blocks <= 1.25.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-1915
WP Zillow Review Slider <= 2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1776
Icegram Engage <= 2.1.7 - Cross-Site Scripting
High
CVE-2022-1472
Better Find and Replace <= 1.3.5 - Admin+ SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.