Medium
CVE-2022-0377
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-24971
WP Responsive Menu <= 3.1.7 - Missing Authorization to Settings Update & Stored Cross-Site Scripting
High
CVE-2022-4949
AdSanity < 1.8.2 - Authenticated Arbitrary File Upload
High
CVE-2022-0328
Simple Membership <= 4.0.8 - Cross-Site Request Forgery to Arbitrary Member Deletion
High
CVE-2022-23911
AP Custom Testimonial <= 1.4.7 - SQL Injection
Medium
CVE-2022-23912
Testimonial WordPress Plugin < 1.4.7 - Reflected Cross-Site Scripting
High
CVE-2022-23976
Access Demo Importer <= 1.0.7 - Cross-Site Request Forgery to Data Reset
High
e647d1ff-2d2c-43e4-b723-28ed410c4b3a
Classic Editor Addon < 2.6.4 - Cross-Site Request Forgery
Medium
CVE-2022-0164
Coming soon and Maintenance mode <= 3.6.6 - Missing Authorization to Arbitrary Email Send
Medium
CVE-2021-25101
Anti-Malware Security and Brute-Force Firewall <= 4.20.93 - Reflected Cross-Site Scripting
Medium
CVE-2021-24921
Advanced Database Cleaner <= 3.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-0313
Float Menu <= 4.3 - Arbitrary Menu Deletion via Cross-Site Request Forgery
Medium
CVE-2019-6726
WP Fastest Cache <= 0.8.9.0 - Directory Traversal to Arbitrary File Deletion
Medium
63bced7f-89ec-4c52-9e58-63ef2d311b31
Catch Web Tools <= 2.7.0 - Missing Authorization
High
CVE-2021-25082
Popup Builder <= 4.0.6 - Local File Inclusion and PHAR Deserialization
Medium
CVE-2021-25075
Duplicate Page or Post <= 1.5.0 - Missing Authorization to Stored Cross-Site Scripting
High
452e9acc-4029-4f43-9941-c1aa2a413e34
Lean WP <= 1.4.0 - Cross-Site Request Forgery
High
CVE-2022-0255
Database Backup for WordPress <= 2.5 - Admin+ SQL Injection
Medium
CVE-2022-0288
Ad Inserter <= 2.7.9 - Reflected Cross-Site Scripting
High
3624708c-b0da-4177-a8e8-cf5f5c432f97
WP Debugging <= 2.11.7 - Cross-Site Request Forgery
High
CVE-2022-0228
Popup Builder <= 4.0.6 - Authenticated SQL Injection via order & orderby Parameters
High
CVE-2021-24862
RegistrationMagic <= 5.0.1.5 - SQL Injection
High
CVE-2022-0199
Coming soon and Maintenance mode <= 3.6.7 - Cross-Site request Forgery to Arbitrary Email Send
Medium
CVE-2022-0402
Super Forms - Drag & Drop Form Builder WordPress <= 6.0.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.