High
CVE-2022-4358
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2022-4360
WP RSS By Publishers <= 0.1 - Authenticated (Admin+) SQL Injection
High
CVE-2022-3860
Visual Email Designer for WooCommerce <= 1.7.1 - Authenticated (Author+) SQL Injection
Critical
CVE-2022-4099
Joy Of Text Lite – SMS messaging for WordPress <= 2.3.0 - Unauthenticated SQL Injection
Medium
CVE-2022-4351
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-4352
Qe SEO Handyman <= 1.0 - Authenticated (Administrator+) SQL Injection
Medium
90c0e937-19fd-484e-a50f-42b00a6eeb30
Moosend Website Connector <= 1.0.189 - Missing Authorization
Critical
CVE-2022-3241
Build App Online <= 1.0.18 - Unauthenticated SQL Injection
High
CVE-2022-4166
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via addCountS
High
CVE-2022-4150
Contest Gallery (Pro) <= 19.1.5 - SQL Injection via option_id
High
CVE-2022-4153
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via upload[]
High
CVE-2022-4159
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via cg_id
High
CVE-2022-4162
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_row
High
CVE-2022-4165
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_order
High
CVE-2022-4152
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id GET
Medium
CVE-2022-4057
Autoptimize <= 3.0.4 - Sensitive Information Disclosure
Medium
CVE-2022-4154
Contest Gallery Pro <= 19.1.4.1 - Authenticated (Administrator+) SQL Injection via wp_user_id
High
CVE-2022-4161
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_start
High
CVE-2022-4160
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_id
High
CVE-2022-4164
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_multiple_files_for_post
High
CVE-2022-4155
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via wp_user_id
High
CVE-2022-4157
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_option_id
High
CVE-2022-4156
Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id
High
CVE-2022-4158
Contest Gallery <= 19.1.4.1 - Unauthenticated SQL Injection via cg_Fields
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.