High
CVE-2022-3141
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
e532a2b4-0fb4-4256-89a9-435b55d9de91
WordPress Membership, User Registration, Login Form, User Profile & Restrict Content Plugin – ProfilePress <= 3.2.15 - Reflected Cross-Site Scripting
High
CVE-2022-2518
Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-2635
Autoptimize <= 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Critical CSS Settings
Medium
321bfc32-a08d-46ea-98c8-c7be10905307
Web en Mantenimiento <= 1.0.6 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-2371
YaySMTP – Simple WP SMTP Mail <= 2.2 - Stored Cross-Site Scripting
High
CVE-2022-2046
Directorist <= 7.2.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2022-2438
Broken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2022-2372
YaySMTP – Simple WP SMTP Mail <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2389
Abandoned Cart Recovery for WooCommerce by Autonami <= 2.1.1 - Missing Authorization
High
f4832fbb-94ed-41c4-8434-1972f4d92476
Ultimate Member <= 2.4.1 - Username Enumeration
Medium
CVE-2022-2594
Advanced Custom Fields <= 5.12.2 - File Upload
Medium
CVE-2022-31475
GiveWP <= 2.20.2 - Authenticated Arbitrary File Read
Medium
CVE-2022-28700
GiveWP <= 2.20.2 - Authenticated Arbitrary File Creation
Medium
CVE-2022-2367
WSM Downloader <- 1.4.0 - Domain Bypass
Critical
CVE-2022-2437
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 - Unauthenticated PHAR Deserialization
High
CVE-2022-2369
YaySMTP – Simple WP SMTP Mail <= 2.2 - Sensitive Information Disclosure
High
CVE-2022-2356
Frontend File Manager & Sharing – User Private Files <= 1.1.2 - Subscriber+ Arbitrary File Upload
Medium
CVE-2022-2215
GiveWP <= 2.21.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2370
YaySMTP – Simple WP SMTP Mail <= 2.2 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2022-2260
GiveWP – Donation Plugin and Fundraising Platform <= 2.21.2 - Cross-Site Request Forgery
Medium
741ad2f5-d5cf-44bc-ac4a-7894df77a3d1
Keep Backup Daily <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-1906
Copyright Proof <= 4.16 - Reflected Cross-Site Scripting
High
CVE-2022-2444
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.