High
CVE-2022-3768
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2022-3769
OWM Weather <= 5.6.8 - Authenticated (Contributor+) SQL Injection
High
CVE-2022-3720
Event Monster <= 1.2.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-3691
DeepL Pro API Translation <= 1.7.4 - Sensitive Information Disclosure
Medium
CVE-2022-3762
Booster Elite for WooCommerce < 1.1.7 - Authenticated (Admin/Shop Manager+) Arbitrary File Download
High
CVE-2022-43462
IP Blacklist Cloud <= 5.00 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-42883
Quiz And Survey Master <= 7.3.10 - Sensitive Information Disclosure
High
CVE-2021-36898
Quiz And Survey Master <= 7.3.4 - Authenticated (Administrator+) SQL Injection
High
ddd06190-d0c1-445d-8c6f-4c7df3248db4
WordPress Core < 6.0.3 - Cross-Site Request Forgery via wp-trackback.php
Medium
CVE-2022-40696
Advanced Custom Fields <= 6.0.2 - Authenticated (Contributor+) Information Disclosure
Low
0fcdfba2-aa19-4d0c-8880-5ee2c0680555
WordPress Core < 6.0.3 - Shared User Instance Weakness
Critical
CVE-2022-3481
WooCommerce Dropshipping Premium <= 4.3 - Unauthenticated SQL Injection
High
CVE-2022-3494
Complianz Free <= 6.3.3 & Premium <= 6.3.5 - SQL Injection via Translations
High
CVE-2022-41623
ALD - AliExpress Dropshipping and Fulfillment for WooCommerce Premium <= 1.1.0 - Sensitive Information Disclosure
Critical
CVE-2022-3254
AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection
Critical
c5c17dea-7b61-4e73-ac61-3fe536c22962
WooCommerce Products Vendor <= 2.1.65 - Unauthenticated SQL Injection
High
CVE-2022-3395
WP ALL Export Pro <= 1.7.8 - Authenticated SQL Injection
High
CVE-2022-3246
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection
High
CVE-2022-3302
AntiSpam by CleanTalk <= 5.185 - Authenticated (Administrator+) SQL Injection
High
CVE-2022-38137
Analytify – Google Analytics Dashboard For WordPress <= 4.2.2 - Cross-Site Request Forgery
Medium
CVE-2022-41618
Media Library Assistant <= 3.00 - Information Disclosure
High
CVE-2022-3300
Form Maker <= 1.15.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-2834
Helpful <= 4.5.25 - Sensitive Information Disclosure
High
CVE-2022-3150
WP Custom Cursors <= 3.0.1 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.