High
CVE-2021-4096
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2022-0656
Web To Print Shop : uDraw <= 3.3.3 - Unauthenticated Arbitrary File Access
High
CVE-2022-1008
Catch Themes Demo Import <= 3.0.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2022-1239
HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 8.8.13 - Server Side Request Forgery
Critical
3ed280ba-d7e5-4637-ab84-93dc82c009d8
Admin Word Count Column <= 2.2 - Arbitrary File Read
Medium
CVE-2022-1001
WP Downgrade <= 1.2.2 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0537
MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
CVE-2022-0493
String Locator <= 2.4.2 - Authenticated Arbitrary File Read
Critical
CVE-2022-0591
Formcraft3 <= 3.8.27 - Server Side Request Forgery
Critical
76e41376-3db0-481b-9f86-bb77b00882e0
Mistape 1.4.0 - Backdoor
High
CVE-2021-24905
Advanced Contact form 7 DB <= 1.8.6 - Authenticated Arbitrary File Deletion
Critical
CVE-2021-25003
WPCargo <= 6.8.9 - Unauthenticated Remote Code Execution
High
CVE-2022-0440
Catch Themes Demo Import <= 2.1 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2021-24216
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload
High
a596c9c4-ceb4-470c-8ad5-986cd62da91e
Ad Inserter < 2.7.11 - Authenticated (Admin+) Remote Code Execution
High
CVE-2021-24820
Cost Calculator <= 1.8 - Authenticated Local File Inclusion
Medium
CVE-2022-0380
Fotobook <= 3.2.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-23982
Perfect Brands for WooCommerce <= 2.0.4 - Server Information Disclosure
Medium
CVE-2022-0377
LearnPress <= 4.1.4.1 - Arbitrary Image Renaming
High
CVE-2022-4949
AdSanity < 1.8.2 - Authenticated Arbitrary File Upload
Critical
CVE-2022-0320
Essential Addons for Elementor <= 5.0.4 - Local File Inclusion
High
6c718d65-eb40-43db-821f-344c6eca2384
WP-Appbox <= 4.3.17 - Local File Inclusion
High
d21bebcc-8dba-407d-8a3a-b91d3cddd38f
WP Ultimate CSV Importer <= 6.4.0 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.