High
CVE-2022-1885
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2022-1913
Add Post URL <= 2.1.0 - Cross-Site Request Forgery
High
1f9d8bbe-205f-44b6-a0c6-89b9135e6363
Contest Gallery – Files Upload and Contest Plugin for WordPress <= 17.0.4 - Admin+ SQL Injection
Medium
fcc96838-dde5-49f2-ac73-977a8347c455
Custom Colors for Real Estate Manager <= 1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2022-1914
Clean-Contact <= 1.6 - Cross-Site Request Forgery
Medium
CVE-2022-1843
MailPress <= 7.2.1 - Cross-Site Request Forgery
Medium
e1fc6a2e-9c91-4517-8f04-fb3ea65413b8
Zengo Custom Thumbnail Image Gallery <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
dbbd9eda-756b-4fa7-b7b6-d91181cc80d6
BuddyForms Members <= 1.4.21 - Cross-Site Scripting
Critical
CVE-2022-1842
OpenBook Book Data <= 3.5.2 - Cross-Site Request Forgery
Medium
c17c344b-c891-4086-98c8-cea5673173d7
More Featured Images <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
bb0e99c7-003a-4795-8acb-e6dafca34b8c
CO2ok: carbon offsetting for e-commerce <= 1.0.9.21 - Cross-Site Scripting
High
b1c27c27-f597-4867-a8d8-a83a3a1bf5f6
PPC Tracker WordPress <= 2.0 - Stored Cross-Site Scripting via IP
Medium
abc14a00-5560-440b-a5ba-4ff41a6c54c3
Visualizer <= 3.7.6 - Reflected Cross-Site Scripting
High
CVE-2022-1846
Tiny Contact Form <= 0.7 - Cross-Site Request Forgery
Medium
a31ab564-48b7-44f7-a1da-226222c3fd7b
Cookie Params <= 0.2 - Reflected Cross-Site Scripting and Cross-Site Request Forgery
High
a0b1e907-0c31-4b40-b3f9-0ac665f3394a
Smartkit <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
985fd6a4-282a-48e9-9149-69e6ee794667
Booster for WooCommerce <= 5.5.8 - Reflected Cross-Site Scripting
High
CVE-2022-1539
Exports and Reports <= 0.9.1 - CSV Injection
Medium
8945128b-79b7-46c7-b981-78e6619d3f63
WPSID Shortcode <= 1.0.9.2 - Open Redirect
Medium
CVE-2022-1845
WP Post Styling <= 1.3.0 - Cross-Site Request Forgery
High
7b6557de-fd4f-4172-ad7d-940f9f3ea2db
Running Line <= 1.2 - Cross-Site Request Forgery to Settings Update
Medium
7870badf-a1c8-4a47-adac-d6535ab81d79
CURCY <= 2.1.17 - Reflected Cross-Site Scripting
High
CVE-2022-1844
WP Sentry <= 1.0 - Cross-Site Request Forgery
High
6971eea0-9d0b-4a7f-be05-001c34770c2f
Ping List Pro <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.