Medium
CVE-2022-27846
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-27847
Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery
Medium
CVE-2021-36893
Responsive Tabs <= 4.0.5 - Authenticated Stored Cross-Site Scripting
High
CVE-2022-1008
Catch Themes Demo Import <= 3.0.2 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2022-1088
Page Security & Membership <= 1.5.15 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1282
Photo Gallery by 10Web <= 1.6.2 - Cross-Site Scripting
Medium
cca16945-f230-4d0d-9f40-eabd5bf42e30
Easy Social Icons <= 3.2.2 - Admin+ Cross-Site Scripting
High
cc4f2fd3-ed6b-4fe4-b300-02b1b35ebb7b
Easy Social Icons <= 3.2.0 - Authenticated (Admin+) Cross-Site Scripting and Missing Authorization Checks
Medium
CVE-2022-1090
Good & Bad Comments <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-25102
All In One WP Security & Firewall <= 4.4.10 - Open Redirect and Reflected Cross-Site Scripting
High
CVE-2022-0141
Visual Form Builder <= 3.0.7 - Cross-Site Request Forgery to Data Modification
Medium
CVE-2022-0953
Anti-Malware Security and Brute-Force Firewall <= 4.20.95 - Reflected Cross-Site Scripting
Medium
7dfa84ed-0edf-4a75-8ec3-986c3880353c
Easy Social Icons <= 3.1.4 - Admin+ Cross-Site Scripting
Medium
CVE-2022-1153
LayerSlider <= 7.1.1 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-0780
SearchIQ – The Search Solution <= 3.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-1239
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 8.8.13 - Server Side Request Forgery
High
CVE-2022-1281
Photo Gallery by 10Web <= 1.6.2 - SQL Injection
Medium
CVE-2022-1054
RSVP and Event Management <= 2.7.7 - Unauthenticated Sensitive Information Disclosure
Critical
CVE-2022-0693
Master Elements <= 8.0 - Unauthenticated SQL injection
Medium
CVE-2022-0662
AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Advert Names
Medium
CVE-2022-1255
Import and export users and customers <= 1.19.2 - Stored Cross-Site Scripting
Medium
CVE-2021-25120
Easy Social Feed <= 6.2.6 - Reflected Cross-Site Scripting
High
CVE-2022-1273
Import WP – Import and Export WordPress data to XML or CSV files <= 2.4.5 - Authenticated Arbitrary File Upload
Medium
CVE-2022-0649
AdRotate – Ad manager & AdSense Ads <= 5.8.22 - Authenticated Stored Cross-Site Scripting via Group Names
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.