Critical
CVE-2022-1594
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-1595
HC Custom WP-Admin URL <= 1.4 - Information Exposure
High
CVE-2022-0863
WP SVG Icons <= 3.2.3 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2022-1624
Latest Tweets Widget <= 1.1.4 - Arbitrary Settings Update via Cross-Site Request Forgery
Medium
CVE-2022-1717
Custom Share Buttons with Floating Sidebar <= 4.1 - Stored Cross-Site Scripting
Medium
CVE-2022-1604
MailerLite - Signup forms <= 1.5.3 - Reflected Cross-Site Scripting
High
CVE-2022-1202
WP-CRM – Customer Relations Management for WordPress <= 1.2.1 - CSV injection
Medium
CVE-2022-1532
Themify - WooCommerce Product Filter <= 1.3.7 - Reflected Cross-Site Scripting
High
CVE-2022-1608
OnePress Social Locker <= 5.6.2 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2022-0885
Member Hero <= 1.0.9 - Remote Code Execution
Medium
CVE-2022-1656
JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification
High
CVE-2022-1657
JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion
High
CVE-2022-1612
Webriti SMTP Mail <= 1.0 - Cross-Site Request Forgery to options update
Medium
CVE-2022-29435
Code Snippets Extended <= 1.4.7 - Cross-Site Request Forgery
High
CVE-2022-29436
Code Snippets Extended <= 1.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-29449
Opal Hotel Room Booking plugin <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-29445
Popup Box <= 2.1.2 - Authenticated Local File Inclusion
Low
CVE-2014-2054
Advanced Contact form 7 DB <= 2.0.8 & Import any XML, CSV or Excel File to WordPress <= 3.8.0 - Use of Vulnerable Component (PHPExcel)
Medium
facf765a-ddce-485b-adce-99ee22262951
All in One Invite Codes <= 1.0.14 - Cross-Site Scripting
High
CVE-2021-25116
Enqueue Anything <= 1.0.1 - Missing Authorization
Medium
CVE-2022-1773
WP Athletics <= 1.1.7 - Reflected Cross-Site Scripting
Critical
CVE-2022-0827
Bestbooks <= 2.6.3 - Unauthenticated SQL Injection
Medium
dacfba3e-c1d7-475c-885b-f77b77a65f91
Keyword Rank Tracker <= 1.0.7 - Stored Cross-Site Scripting
Medium
CVE-2022-1549
WP Athletics <= 1.1.7 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.