Medium
5dde4850-347f-40e6-9cea-87284aa655e7
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2022-36285
Uploading SVG, WEBP and ICO files <= 1.0.1 - Arbitrary File Upload
Medium
CVE-2022-36376
Rank Math SEO <= 1.0.95 - Server-Side Request Forgery
High
CVE-2022-40217
WPide <= 2.6 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2022-35235
WPide <= 2.6 - Authenticated (Administrator+) Arbitrary File Read
Medium
CVE-2022-2638
Export All URLs <= 4.3 - Arbitrary File Deletion
High
6635db72-8302-421d-9011-7eabb57c43a2
Contempo Real Estate Custom Posts <= 3.2.6 - Unauthorized File Upload
High
5bf0267d-b84f-4ad2-8bb3-cc2aa4996af1
PostmagThemes Demo Import <= 1.0.6 - Authenticated (Admin+) Arbitrary File Upload
Medium
332b8d96-89b2-473b-9186-239e49f5b064
Download Manager <= 3.2.53 - Reflected Cross-Site Scripting
High
CVE-2022-2261
WPIDE – File Manager & Code Editor <= 2.6 - Authenticated (Admininstrator+) Local File Inclusion
Medium
CVE-2022-2267
Mailchimp for WooCommerce <= 2.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2022-2556
Mailchimp for WooCommerce <= 2.7.1 - Authenticated (Admin+) Server-Side Request Forgery
Critical
CVE-2022-34149
WP OAuth Server <= 3.0.4 - Authentication Bypass
High
CVE-2022-34154
Enable SVG, WebP & ICO Upload <= 1.1.0 - Arbitrary File Upload
Medium
CVE-2022-2392
Lana Downloads Manager <= 1.7.1 - Authenticated (Contributor+) Arbitrary File Download
High
CVE-2022-2557
Team - WordPress Team Member Showcase Plugin <= 4.1.1 - Directory Traversal to Arbitrary File Read/Deletion
Medium
a8163dc0-e380-4a0b-bd18-34a3e80ca3dd
VR Calendar <= 2.4.4 - Authenticated (Administrator+) Local File Inclusion
High
CVE-2022-2431
Download Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion
High
CVE-2022-2354
WP-DBManager <= 2.80.7 - Authenticated (Admin+) Remote Code Execution on Multi-Site
Critical
CVE-2022-2314
VR Calendar <= 2.3.1 - Unauthenticated Remote Code Execution
Critical
CVE-2022-2180
GREYD.SUITE <= 1.2.6 - Unauthenticated Arbitrary File Upload
High
CVE-2022-2046
Directorist <= 7.2.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2022-34839
WP OAuth2 Server <= 1.0.1 - Authentication Bypass
High
CVE-2022-33901
MultiSafepay plugin for WooCommerce <= 4.15.0 - Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.