High
CVE-2022-24775
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-25609
Yoo Slider plugin <= 2.0.0 - Stored Cross-Site Scripting
Medium
CVE-2022-25608
Yoo Slider – Image Slider & Video Slider <= 2.0.0 - Cross-Site Request Forgery
High
CVE-2022-1006
Advanced Booking Calendar <= 1.7.0 - Authenticated SQL Injection
Medium
CVE-2022-0531
Migration, Backup, Staging – WPvivid <= 0.9.69 - Reflected Cross-Site Scripting via sub_page Parameter
High
CVE-2022-0920
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Information Disclosure
Medium
CVE-2022-0840
Easy Social Icons <= 3.2.0 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0919
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure
Medium
CVE-2022-1208
Ultimate Member <= 2.3.2 - Stored Cross-Site Scripting
Medium
CVE-2022-1007
Advanced Booking Calendar <= 1.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-0914
Export All URLs <= 4.2 - Cross-Site Request Forgery to Sensitive Data Export
Medium
CVE-2022-0969
Image optimization & Lazy Load <= 3.3.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0892
Export All URLs <= 4.1 - Reflected Cross-Site Scripting
High
CVE-2022-1023
Podcast Importer SecondLine < 1.3.8 - SQL Injection
Medium
CVE-2022-0471
Favicon by RealFaviconGenerator <= 1.3.22 - Reflected Cross-Site Scripting
High
CVE-2022-25607
FV Flowplayer Video Player <= 7.5.15.727 - SQL Injection
Critical
1f714f97-5e1a-498a-9722-1e4bb883c5c7
Minimist <= 1.2.5 - Prototype Pollution
Medium
CVE-2023-0422
Article Directory <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'publish_terms_text'
Medium
CVE-2022-25602
Responsive Menu <= 4.1.7 - Missing Authorization Checks
High
CVE-2022-0828
Download Manager <= 3.2.38 - Unauthenticated Brute Force of File Master Key
Critical
CVE-2022-0949
WP Block and Stop Bad Bots <= 6.92 - SQL Injection
Medium
CVE-2022-0271
LearnPress <= 4.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-0246
iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
High
CVE-2022-0989
NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.