Medium
CVE-2022-3896
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
4f7fa5a4-07d7-4815-b393-871568777b0f
Download Monitor <= 4.7.2 - Authenticated Directory Traversal to Sensitive Information Exposure
Critical
CVE-2022-44584
WatchTowerHQ <= 3.6.15 - Unauthenticated Arbitrary File Deletion
High
CVE-2022-44583
WatchTowerHQ <= 3.6.15 - Unauthenticated Arbitrary File Download
High
CVE-2022-39369
phpCAS authentication library < 1.6.0 - Service Hostname Discovery Exploitation
High
CVE-2022-3383
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Select
High
CVE-2022-3384
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_options
Critical
CVE-2022-42497
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary Code Execution
Critical
CVE-2022-42698
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary File Upload
Medium
CVE-2022-42494
All in One SEO Pro <= 4.2.5.1 - Authenticated (Admin+) Server Side Request Forgery
Critical
CVE-2022-3708
Web Stories <= 1.24.0 - Server Side Request Forgery
High
CVE-2022-38140
SEO Plugin by Squirrly SEO <= 12.1.10 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2022-41609
Better Messages <= 1.9.10.68 - Server-Side Request Forgery
Medium
8f374eea-e6c0-4007-8855-4b1b63335775
LDD Directory Lite - <= 3.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-3418
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2022-2441
ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to Remote Command Execution
High
CVE-2022-3537
Role Based Pricing for WooCommerce <= 1.6.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2022-2711
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal
Medium
CVE-2022-2190
Gallery Plugin for WordPress – Envira Photo Gallery <= 1.8.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-3402
Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting
Critical
2637e273-a308-4033-be5a-2f778f8df282
Create Block Theme <= 1.2.1 - Unauthenticated Arbitrary File Upload
High
CVE-2022-3394
WP ALL Export Pro <= 1.7.8 - Authenticated Remote Code Execution
Medium
505edcf7-7015-453e-abd2-e2cd68a3a9f6
WP Super Cache <= 1.8 - Unauthenticated Cache Poisoning
Medium
CVE-2022-3247
Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.