High
CVE-2022-21662
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2021-25108
IP2Location Country Blocker <= 2.26.5 - Arbitrary Country Ban via Cross-Site Request Forgery
Medium
CVE-2022-21663
WordPress Core < 5.8.3 - Super Admin Multi-Site Installation Object Injection
High
CVE-2021-25095
IP2Location Country Blocker <= 2.26.4 - Subscriber+ Arbitrary Country Ban
Medium
CVE-2022-23979
Ultimate Reviews <= 3.0.15 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-25096
IP2Location Country Blocker <= 2.26.4 - Ban Bypass
High
CVE-2022-21664
WordPress Core < 5.8.3 - SQL Injection via WP_Meta_Query
Medium
CVE-2022-23179
Responsive Contact Form Builder & Lead Generation Plugin < 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-24839
SupportCandy <= 2.2.4 - Unauthenticated Arbitrary Ticket Deletion
Medium
CVE-2021-25106
Privacy Policy Generator, Terms & Conditions Generator - WPLegalPages <= 2.7.0 - Arbitrary Settings Update to Stored Cross-Site Scripting
Medium
CVE-2021-24928
Rearrange Woocommerce Products <= 3.0.7 - Subscriber+ SQL Injection
Medium
CVE-2021-24878
SupportCandy <= 2.2.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-24879
SupportCandy – Helpdesk & Support Ticket System <= 2.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2022-24663
PHP Everywhere <= 2.0.3 - Remote Code Execution by Subscriber+ users via shortcode
Medium
CVE-2021-24880
SupportCandy <= 2.2.6 - Stored Cross-Site Scripting via Shortcode
Medium
CVE-2021-24843
SupportCandy <= 2.2.6 - Cross-Site Request Forgery to Arbitrary Ticket Deletion
Medium
CVE-2021-25084
Advanced Cron Manager <= 2.4.1 - Subscriber+ Arbitrary Events/Schedules Creation/Deletion
Medium
CVE-2022-50970
Amazon Affiliate <= 3.17 - Reflected Cross-Site Scripting
High
CVE-2021-25109
Futurio Extra <= 1.6.2 - Authenticated (Admin+) SQL Injection
Critical
CVE-2022-24664
PHP Everywhere <= 2.0.3 - Authenticated (Contributor+) Remote Code Execution via Metabox
Critical
CVE-2022-24665
PHP Everywhere <= 2.0.3 - Remote Code Execution by Contributor+ users via gutenberg block
Medium
CVE-2021-24937
Asset CleanUp <= 1.3.8.4 - Reflected Cross-Site Scripting
Medium
cc912ace-65d9-4833-a3ad-dc5d37989269
TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Blog Option Update
Medium
CVE-2021-25063
Contact Form 7 Skins <= 2.5.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.