High
CVE-2022-23988
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2022-23987
WS Form LITE and Pro < 1.8.176 - Stored Cross-Site Scripting
Medium
CVE-2021-24913
Logo Showcase with Slick Slider <= 2.0 - Cross-Site Request Forgery
Critical
CVE-2022-1165
Blackhole for Bad Bots <= 3.3.1 - Arbitrary IP Address Blocking via IP Spoofing
High
CVE-2022-0411
Asgaros Forum < 2.0.0 - SQL Injection
Medium
CVE-2021-25034
WP User – Custom Registration Forms, Login and User Profile < 7.0 - Reflected Cross-Site Scripting
Critical
CVE-2021-25010
Post Snippets <= 3.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-25042
WP Visitor Statistics (Real Time Traffic) <= 5.4 - Missing Authorization to Stored Cross-Site Scripting
High
CVE-2022-0385
Crazy Bone <= 0.6.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2021-24994
Migration, Backup, Staging – WPvivid <= 0.9.68 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-23982
Perfect Brands for WooCommerce <= 2.0.4 - Server Information Disclosure
Medium
CVE-2022-23981
Perfect Brands for WooCommerce <= 2.0.4 - Unauthorized Brand Creation
Medium
CVE-2022-25604
Price Table <= 0.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2021-44779
[GWA] AutoResponder <= 2.3 - Unauthenticated SQL Injection
Medium
CVE-2021-25081
WP Google Map <= 1.8.3 - Arbitrary Post Deletion and Plugin Settings Update via Cross-Site Request Forgery
High
6a21d834-db8a-471f-b062-59ecfbab0dd6
[GWA] AutoResponder <= 2.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-25112
WHMCS Bridge <= 6.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24814
WordPress GDPR & CCPA < 1.9.26 - Reflected Cross-Site Scripting
Medium
CVE-2021-24920
StatCounter <= 2.0.6 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0381
Embed Swagger <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-0189
WP RSS Aggregator <= 4.19.3 - Reflected Cross-Site Scripting
High
CVE-2021-24897
Add Subtitle <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-0220
WordPress GDPR & CCPA <= 1.9.26 Reflected Cross-Site Scripting
Medium
CVE-2022-0360
WP Ultimate CSV Importer <= 6.4.2 - Admin+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.