Medium
7c32d967-85b9-4c93-a948-0126efb78f39
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-0398
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Subscriber+ Arbitrary Affiliate Links Creation
Medium
CVE-2022-0634
ThirstyAffiliates Affiliate Link Manager <= 3.10.4 - Authorization Bypass and Cross-Site Request Forgery
Medium
CVE-2022-1228
Opensea <= 1.0.2 - Cross-Site Scripting
Medium
CVE-2022-0876
Social comments by WpDevArt <= 2.4.9 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1063
Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1027
Page Restriction WordPress <= 1.2.6 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-1152
Menubar <= 5.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2021-46781
Coming Soon by Supsystic <= 1.7.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-0737
Text Hover <= 4.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2021-46782
Pricing Table by Supsystic <= 1.9.4 - Reflected Cross-Site Scripting
High
CVE-2022-0707
Easy Digital Downloads <= 2.11.5 - Cross-Site Request Forgery
Medium
CVE-2021-46780
Easy Google Maps <= 1.9.31 - Reflected Cross-Site Scripting
Medium
CVE-2021-24800
DW Question & Answer Pro <= 1.3.6 - Missing Authorization Checks
High
CVE-2021-24957
Advanced Page Visit Counter <= 6.1.5 - Subscriber+ Blind SQL injection
High
86f7eb83-8483-4c6b-993e-ce11084241e8
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting
Medium
574dd6d8-14df-47b8-bf03-28a3c02b73ec
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection
Medium
CVE-2021-24805
DW Question & Answer Pro <= 1.3.6 - Cross-Site Request Forgery
Medium
CVE-2022-0314
Nimble Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
High
CVE-2021-25111
English WordPress Admin <= 1.5.1.1 - Unauthenticated Open Redirect
Medium
CVE-2021-36846
Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button – Chaty <= 2.8.3 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-27845
Plausible Analytics <= 1.2.2 - Stored Cross-Site Scripting
Medium
CVE-2022-27844
Migration, Backup, Staging – WPvivid <= 0.9.70 - Authenticated Arbitrary File Read
Medium
CVE-2022-0864
UpdraftPlus WordPress Backup Plugin < 1.22.9 Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.