High
CVE-2022-2357
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2022-2356
Frontend File Manager & Sharing – User Private Files <= 1.1.2 - Subscriber+ Arbitrary File Upload
Medium
CVE-2022-2189
WP Video Lightbox <= 1.9.4 - Reflected Cross-Site Scripting
High
CVE-2022-1565
Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload
Medium
45f3568c-b6d9-4d00-a8cd-571443d80fd3
Memory Usage, Memory Limit, PHP and Server Memory Health Check and Fix Plugin <= 2.43 - Cross-Site Scripting
Medium
CVE-2022-2187
Contact Form 7 Captcha <= 0.1.1 - Reflected Cross-Site Scripting
Medium
35b46587-1c6e-4d3f-a8d0-e7797cee882d
GTM Server Side <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
69ec31f3-8ec8-40ad-ba7f-77f9132ad51f
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 - Server-Side Request Forgery
High
CVE-2022-1952
Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC <= 1.1.15 - Arbitrary File Upload
High
CVE-2022-1751
Skitter Slideshow <= 2.5.2 - Unauthenticated Server-Side Request Forgery
High
CVE-2022-2083
Simple Single Sign On <= 4.1.1 - Insecure OAuth Implementation to Authentication Bypass
Critical
CVE-2022-1574
HTML2WP <= 1.0.0 - Arbitrary File Upload
Medium
CVE-2022-1977
WP Ultimate CSV Importer <= 6.5.2 - Server-Side Request Forgery
Medium
ef7d7378-fa94-4964-916b-a41f69866d76
VS Contact Form <= 11.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-1756
Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting
Critical
CVE-2022-1765
Hot Linked Image Cacher <= 1.16 - Cross-Site Request Forgery
Medium
CVE-2022-0779
User Meta – User Profile Builder and User management plugin <= 2.4.3 - Path Traversal
Medium
a10da173-9b88-4599-928d-71fc42b35c50
WPify Woo Czech <= 3.5.6 - Reflected Cross-Site Scripting
High
79a41b84-2e19-46eb-9f6b-5155da0b15cc
Google Tag Manager for WordPress <= 1.15 - Cross-Site Scripting via Cloudflare Country Code
High
4c298a24-b68b-450e-b823-f91841046783
3CX Live Chat <= 9.4.2 - Local File Inclusion
Medium
a4c21c56-c424-4667-a281-fa9e7241d8ad
Better Click To Tweet <= 5.10.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-1390
Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read
High
CVE-2022-1386
Fusion Builder <= 3.6.1 & Avada <= 7.6.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2022-1398
External Media without Import <= 1.1.2 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.