Medium
CVE-2022-23638
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2022-0442
UsersWP <= 1.2.3 - Subscriber+ User Avatar Override
Medium
e09e48db-f74a-4663-a724-24938a6c277c
Multiple Themes (Various Versions) - Reflected Cross-Site Scripting
High
CVE-2022-0410
WP Visitor Statistics (Real Time Traffic) <= 5.5 - SQL Injection
Medium
CVE-2022-0205
YOP Poll <= 6.3.4 - Author+ Stored Cross-Site Scripting
Medium
CVE-2022-0384
Video Conferencing with Zoom <= 3.8.16 - E-mail Address Disclosure
Medium
CVE-2021-24810
WP Event Manager <= 3.1.22 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0347
LoginPress <= 1.5.11 - Reflected Cross-Site Scripting via redirect-page Parameter
Medium
CVE-2021-24961
WordPress File Upload <= 4.16.2 - Authenticated Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-0163
Smart Forms < 2.6.71 - Missing Authorization to Sensitive Information Disclosure
Medium
CVE-2021-24960
WordPress File Upload <= 4.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Malicious SVG
High
CVE-2022-0429
WP Cerber Security <= 8.9.5.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-0439
Email Subscribers & Newsletters <= 5.3.1 - Authenticated (or Cross-Site Request Forgery) Blind SQL Injection
Medium
CVE-2021-36848
Social Media Feather <= 2.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-29434
Spiffy Calendar <= 4.9.0 - Edit/Delete event via IDOR
Low
CVE-2022-23984
Comments - wpDiscuz <= 7.3.11 Sensitive Information Disclosure
Critical
CVE-2022-0513
WP Statistics <= 13.1.4 - Unauthenticated Blind SQL Injection
Medium
CVE-2022-25599
Spiffy Calendar <= 4.9.0 - Event deletion via Cross-Site Request Forgery
Medium
CVE-2022-0533
Ditty (formerly Ditty News Ticker) <= 3.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2022-0535
E2Pdf <= 1.16.44 - Stored Cross-Site Scripting
High
CVE-2021-4134
Fancy Product Designer <= 4.7.4 - Admin+ SQL Injection
Medium
CVE-2022-2599
Anti-Malware Security and Brute-Force Firewall <= 4.21.74 - Reflected Cross-Site Scripting
High
CVE-2022-0440
Catch Themes Demo Import <= 2.1 - Authenticated (Admin+) Arbitrary File Upload
High
abb10680-6208-44c8-8cf0-8d2531465a04
WP-Matomo Integration (WP-Piwik) <= 1.0.26 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.