Medium
CVE-2022-0208
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2021-25018
PPOM for WooCommerce <= 23.9 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2022-0193
Complianz - GDPR/CCPA Cookie Consent <= 5.5.2 - Reflected Cross-Site Scripting via s parameter
High
6c718d65-eb40-43db-821f-344c6eca2384
WP-Appbox <= 4.3.17 - Local File Inclusion
High
69725919-490c-4357-872c-d8112af5fe40
Import all XML, CSV & TXT into WordPress < 6.4.2 - Missing Authorization
Medium
CVE-2022-0201
Permalink Manager Lite <= 2.2.14 Reflected Cross-Site Scripting
Medium
3a69bb27-dc93-4515-90e1-08a1fa5fdaa0
Magee Shortcodes < 2.0.9 - Cross-Site Scripting
Medium
CVE-2021-25107
Form Store to DB <= 1.1.0 - Stored Cross-Site Scripting
Medium
CVE-2022-0200
Themify Portfolio Post <= 1.1.6 - Reflected Cross-Site Scripting
High
CVE-2022-0190
Ad Invalid Click Protector <= 1.2.5 - SQL Injection
Medium
CVE-2022-0210
Random Banner <= 4.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-0236
WP Import Export Lite & WP Import Export <= 3.9.15 - Unauthenticated Sensitive Data Disclosure
Medium
CVE-2021-25110
Futurio Extra <= 1.6.2 - Sensitive Information Disclosure
Medium
CVE-2021-4074
WHMCS Bridge <= 6.1 Subscriber+ Stored Cross-Site Scripting
High
CVE-2021-23227
PHP Everywhere <= 2.0.2 - Cross-Site Request Forgery
Medium
6f73b12b-813d-49fa-84a0-3345023a16c6
RSVP and Event Management <= 2.7.4 - Cross-Site Scripting
Medium
6ea36692-2bf3-490d-8293-7de6dcc5e5c9
PublishPress Capabilities <= 2.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-0212
SpiderCalendar <= 1.6.64 - Reflected Cross-Site Scripting
High
CVE-2022-0215
Side Cart Woocommerce (Ajax) <= 2.0 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2022-0206
NewStatPress <= 1.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-25605
WP-DownloadManager plugin <= 1.68.6 - Stored Cross-Site Scripting
Medium
CVE-2022-0181
Quiz And Survey Master <= 7.3.6 - Reflected Cross-Site Scripting
High
CVE-2022-0180
Quiz And Survey Master <= 7.3.6 - Cross-Site Request Forgery
Medium
CVE-2022-0176
PowerPack Lite for Beaver Builder <= 1.2.9.2 Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.