High
CVE-2022-1612
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2022-1768
RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection
Critical
CVE-2022-1765
Hot Linked Image Cacher <= 1.16 - Cross-Site Request Forgery
Medium
CVE-2022-1569
WordPress Forms by Pie Forms <= 1.4.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2022-0788
WP Fundraising Donation and Crowdfunding Platform <= 1.4.2 - Unauthenticated SQL Injection
High
CVE-2022-1577
Database Backup for WordPress <= 2.5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-1562
Enable SVG <= 1.3.1 - Cross-Site Scripting via SVG
Medium
CVE-2022-1567
WP JS <= 2.0.6 - Reflected Cross-Site Scripting
Critical
CVE-2022-0781
Nirweb support <= 2.7.9 - SQL Injection
Critical
CVE-2022-1014
WP Contacts Manager <= 2.2.4 - Unauthenticated SQL Injection
Medium
CVE-2022-1547
Check & Log email <= 1.0.5 - Reflected Cross-Site Scripting
Low
CVE-2022-29423
Countdown & Clock <= 2.3.2 - Pro Features Lock Bypass
Medium
CVE-2022-29422
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.2 - Cross-Site Scripting
Medium
CVE-2022-29421
Countdown & Clock <= 2.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2022-29420
Countdown & Clock <= 2.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1476
All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts
High
4c298a24-b68b-450e-b823-f91841046783
3CX Live Chat <= 9.4.2 - Local File Inclusion
Medium
CVE-2022-1558
Curtain <= 1.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
8981ab1d-5957-444c-a5f1-57317a2e8395
MyAlice – Live Chat, WhatsApp, Facebook Messenger, Instagram, & Chatbot for WooCommerce <= 1.2.7 - Stored Cross-Site Scripting
Critical
CVE-2022-0867
Pricing Table Plugin <= 3.6 - Unauthenticated SQL Injection
High
CVE-2022-1442
Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure
Medium
CVE-2022-1409
VikBooking Hotel Booking Engine & PMS <= 1.5.8 - Arbitrary File Upload
High
CVE-2022-1407
VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-1396
Donorbox – Free Recurring Donation Form <= 7.1.6 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.