High
CVE-2022-0429
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2022-0439
Email Subscribers & Newsletters <= 5.3.1 - Authenticated (or Cross-Site Request Forgery) Blind SQL Injection
Medium
CVE-2021-36848
Social Media Feather <= 2.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-29434
Spiffy Calendar <= 4.9.0 - Edit/Delete event via IDOR
Low
CVE-2022-23984
Comments - wpDiscuz <= 7.3.11 Sensitive Information Disclosure
Critical
CVE-2022-0513
WP Statistics <= 13.1.4 - Unauthenticated Blind SQL Injection
Medium
CVE-2022-25599
Spiffy Calendar <= 4.9.0 - Event deletion via Cross-Site Request Forgery
Medium
CVE-2022-0533
Ditty (formerly Ditty News Ticker) <= 3.0.14 - Reflected Cross-Site Scripting
Medium
CVE-2022-0535
E2Pdf <= 1.16.44 - Stored Cross-Site Scripting
High
CVE-2021-4134
Fancy Product Designer <= 4.7.4 - Admin+ SQL Injection
Medium
CVE-2022-2599
Anti-Malware Security and Brute-Force Firewall <= 4.21.74 - Reflected Cross-Site Scripting
High
CVE-2022-0440
Catch Themes Demo Import <= 2.1 - Authenticated (Admin+) Arbitrary File Upload
High
abb10680-6208-44c8-8cf0-8d2531465a04
WP-Matomo Integration (WP-Piwik) <= 1.0.26 - Cross-Site Request Forgery
Medium
CVE-2021-25039
Multisite Content Copier/Updater <= 1.4.0 - Reflected Cross-Site Scripting
High
CVE-2022-0267
AdRotate – Ad manager & AdSense Ads <= 5.8.17 - Admin+ SQL Injection
High
CVE-2021-24216
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2022-0420
RegistrationMagic <= 5.0.2.1 - SQL Injection
Medium
CVE-2021-25038
WordPress Multisite User Sync/Unsync (Premium) <= 2.1.1 Reflected Cross-Site Scripting
Medium
423627a6-623d-462c-a767-cf021566d9e1
TaxoPress <= 3.4.4 - Reflected Cross-Site Scripting
Medium
2bde5862-1b7c-4e58-b13f-c8f347593c51
IP2Location Country Blocker < 2.26.9 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-0445
WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent < 2.14.2 - Cross-Site Request Forgery
Medium
CVE-2022-0422
White Label MS <= 2.2.8 - Reflected Cross-Site Scripting
High
CVE-2020-35749
Simple Job Board <= 2.9.3 - Local File Inclusion
Medium
CVE-2022-23980
Yasr – Yet Another Stars Rating <= 2.9.9 - Cross-Site Scripting via source
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.