High
CVE-2022-1788
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2022-1787
Sideblog WordPress Plugin <= 6.0 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
Medium
CVE-2022-1814
WP Admin Style <= 0.1.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-1820
Keep Backup Daily <= 2.0.2 - Reflected Cross-Site Scripting
High
CVE-2022-1790
New User Email Set Up <= 0.5.2 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2022-1791
One Click Plugin Updater <= 2.4.14 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-1750
Sticky Popup <= 1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1710
Appointment Hour Booking <= 1.3.55 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2022-1759
RB Internal Links <= 2.0.16 - Cross-Site Request Forgery to Settings update and Cross-Site Scripting
Critical
CVE-2022-1764
WP-chgFontSize <= 1.8 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting
Medium
CVE-2022-1822
Zephyr Project Manager <= 3.2.40 - Reflected Cross-Site Scripting
High
CVE-2022-1758
Genki Pre-Publish Reminder <= 1.4.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-1777
Filr – Secure document library <= 1.2.2 - Missing Authorization
Critical
CVE-2022-1800
Export any WordPress data to XML/CSV <= 1.3.4 - Authenticated SQL Injection
High
642a6d42-100f-4461-b568-35e089287902
CRM WordPress Plugin – RepairBuddy <= 3.72 - SQL Injection
Medium
CVE-2022-1707
Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search
Medium
CVE-2022-25617
Code Snippets <= 2.14.3 - Reflected Cross-Site Scripting
High
CVE-2022-1412
Log WP_Mail <= 0.1 - Sensitive Information Disclosure
Medium
cd7346e8-cd77-46dd-8e7d-694f65b6b62f
Second Street <= 3.1.6 - Stored Cross-Site Scripting via organization_id
Medium
cae1e209-96f3-49ed-a233-768db8e36c5b
Event Management, Events Calendar, RSVP Event Tickets Plugin <= 3.8.4 - Cross-Site Scripting
High
CVE-2022-1605
Email Users <= 4.8.8 - Arbitrary Settings Update via Cross-Site Request Forgery
Medium
CVE-2022-1336
Carousel CK <= 1.1.0 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2022-1792
Quick Subscribe <= 1.7.1 - Cross-Site Request Forgery to Arbitrary Settings Update and Stored Cross-Site Scripting
Medium
CVE-2022-1335
Slideshow CK <= 1.4.9 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.