High
CVE-2022-0993
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-1046
Visual Form Builder <= 3.0.6 - Admin+ Cross-Site Scripting
Medium
CVE-2022-0901
Ad Inserter Free and Pro <= 2.7.11 - Reflected Cross-Site Scripting
High
CVE-2021-43138
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution
Medium
89a23d5a-7728-403e-b654-595d92c20b66
eRoom – Zoom Meetings & Webinar <= 1.3.7 - Unauthorized Setting Update
Critical
CVE-2022-0992
SiteGround Security <= 1.2.5 - Authentication Bypass via 2FA Setup
Medium
CVE-2022-0428
Content Egg <= 5.3.0 - Reflected Cross-Site Scripting
High
5e6218e5-84d9-4180-8275-7da24c554c72
Unify <= 3.2.5 - Cross-Site Scripting
Medium
CVE-2021-36896
Pricing Table <= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2021-36910
WP-Appbox <= 4.3.20 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-25086
Advanced Page Visit Counter <= 5.0.8 - Unauthenticated Cross-Site Scripting
Critical
e08d455e-925d-4a94-8d57-484aedc25411
Tipsacarrier < 1.5.0.5 - Unauthenticated SQL Injection
Medium
CVE-2022-1218
Domain Replace <= 1.3.8 - Reflected Cross-Site Scripting
Medium
9c7edcbd-83b8-405b-892a-c404947990b3
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 4.4.0 - Cross-Site Scripting and SQL Injection
Medium
61aaeca4-6b5c-4b00-ab71-bba976d9e1b5
Lucky Wheel for WooCommerce – Spin a Sale <= 1.0.10 - Cross-Site Scripting
Medium
540d2495-7ad4-428c-b86e-9af73d0ebe51
Ad Invalid Click Protector (AICP) <= 1.2.5.2 - Reflected Cross-Site Scripting and Cross-Site Request Forgery
Medium
438bbd0f-5204-4a71-9730-efa51d864832
Faculty Staff and Student Directory Plugin – Campus Directory <= 1.7.4 - Authenticated Stored Cross-Site Scripting
Medium
350719b1-0e88-4f6f-979e-0ac3d17b852b
Shortcode for Current Date <= 2.1.4 - Stored Cross-Site Scripting
High
02b61eb1-a93f-4437-87de-d698af8ef9f6
Blog2Social <= 6.9.3 - PHP Object Injection
Medium
CVE-2021-36851
Testimonials Slider <= 3.5.8.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2022-25618
wpDataTables – WordPress Tables & Table Charts Plugin <= 2.1.27 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-25613
FV Flowplayer Video Player <= 7.5.18.727 - Stored Cross-Site Scripting
Medium
CVE-2022-1094
amr users <= 4.59.3 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-4950
Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.