Medium
CVE-2022-0287
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
6528041a-0217-43d5-bf29-9208e23aadd9
Weblizar Pin It Button On Image Hover And Post < 3.4 - Authorization Bypass
Medium
ee5e1262-193c-480b-bc27-481c961c7c47
Quick Adsense < 2.8.2 - Missing Authorization
Medium
CVE-2022-1557
ULeak Security & Monitoring Plugin <= 1.2.3 - Stored Cross-Site Scripting
Medium
CVE-2022-1187
WP YouTube Live <= 1.7.21 - Reflected Cross-Site Scripting
Medium
CVE-2022-27851
Use Any Font <= 6.1.7 - Cross-Site Request Forgery to API Key Deactivation
Critical
CVE-2021-46743
Firebase PHP-JWT < 6.0.0 - Algorithm Confusion
Medium
CVE-2022-28290
WordPress Country Selector <= 1.6.5 - Reflected Cross-Site Scripting via AJAX call of check_country_selector
Medium
CVE-2022-28221
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting
Medium
a3335613-1206-4555-8e48-748a336548d4
Animate It! < 2.4.0 - Cross-Site Scripting
Medium
CVE-2022-23183
Advanced Custom Fields <= 5.12 - Authenticated Information Disclosure
Medium
2ef5a8f1-ed3c-48bb-9554-b42e9e8d645d
Curtain < 1.0.2 - Unauthenticated Maintenance Mode Enabled/Disable
Medium
CVE-2022-1186
Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure
Medium
CVE-2022-28222
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting
Critical
CVE-2022-1392
Videos sync PDF <= 1.7.4 - Unauthenticated Local File Inclusion
Medium
CVE-2022-1559
Clipr <= 1.2.3 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0363
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Critical
CVE-2022-0782
Donations <= 1.8 - Unauthenticated SQL Injection
Critical
CVE-2022-0541
FloLaunch <= 2.4 - Missing Authorization
Medium
CVE-2022-1092
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Medium
CVE-2022-0879
Caldera Forms <= 1.9.6 - Reflected Cross-Site Scripting via cf-api
Medium
CVE-2021-25094
Tatsu <= 3.3.12 - Unauthenticated Remote Code Execution
Medium
46258dc2-3e05-4050-baad-3b3ded912bfe
Shopping Cart & eCommerce Store <= 5.2.4 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-0706
Easy Digital Downloads <= 2.11.5 - Admin+ Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.