Medium
CVE-2022-0388
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2022-0784
Title Experiments Free <= 9.0.0 - SQL Injection
Medium
CVE-2022-0600
Conference Scheduler <= 2.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
CVE-2021-36833
MC4WP: Mailchimp for WordPress <= 4.8.6 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-0818
WooCommerce Affiliate Plugin - Coupon Affiliates < 4.16.4.5 - Stored Cross-Site Scripting
Medium
bd57edf5-a75e-4677-a51e-9dd262eeba4a
MC4WP: Mailchimp for WordPress < 4.8.7 - Cross-Site Scripting
High
CVE-2022-0834
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
Critical
CVE-2022-0787
Limit Login Attempts (Spam Protection) <= 4.9.1 - Unauthenticated SQL Injection
High
CVE-2022-0679
Narnoo Distributor <= 2.5.1 - Path Traversal
Medium
CVE-2022-0493
String Locator <= 2.4.2 - Authenticated Arbitrary File Read
Medium
CVE-2021-24978
OSMapper <= 2.1.5 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2021-24962
WordPress File Upload / WordPress File Upload Pro <= 4.16.2 - Authenticated (Contributor+) Path Traversal
Medium
CVE-2022-0621
dTabs <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2022-0643
Bank Mellat <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2021-25012
Pz-LinkCard <= 2.4.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-0647
Bulk Creator <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-0720
Appointment and Event Booking Calendar for WordPress - Amelia < 1.0.47 - Arbitrary Booking Update and Sensitive Data Exposure
Medium
CVE-2022-0599
Mapping Multiple URLs Redirect Same Page <= 5.8 - Reflected Cross-Site Scripting
High
CVE-2022-0620
Delete Old Order <= 0.2 - Cross-Site Scripting
Medium
CVE-2022-0397
WPC Smart Wishlist for WooCommerce <= 2.9.3 - Reflected Cross-Site Scripting
High
CVE-2022-0499
Sermon Browser <= 0.45.22 - Cross-Site Request Forgery
Medium
CVE-2022-0619
Database Peek <= 1.2 - Reflected Cross-Site Scripting
Critical
CVE-2022-0739
BookingPress < 1.0.11 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.