Medium
CVE-2022-27629
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2022-1386
Fusion Builder <= 3.6.1 & Avada <= 7.6.1 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2022-1182
Visual Slide Box Builder <= 3.2.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-0424
Popup by Supsystic <= 1.10.8 - Sensitive Information Disclosure
Medium
CVE-2022-0418
Event List < 0.8.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2022-1013
Personal Dictionary <= 1.3.3 - Unauthenticated SQL Injection
Medium
CVE-2022-0814
Ubigeo de Perú para Woocommerce y WordPress <= 3.6.3 - Unauthenticated SQL Injection
Critical
CVE-2022-0771
SiteSuperCharger <= 5.1.10 - Unauthenticated SQL Injection
Medium
CVE-2021-36828
WP Maintenance <= 6.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-4096
Fancy Product Designer <= 4.7.5 - Cross-Site Request Forgery to Arbitrary File Upload
Critical
CVE-2022-0773
Documentor – Create Product Documentation <= 1.5.3 - Unauthenticated SQL Injection
Medium
CVE-2022-0191
Ad Invalid Click Protector (AICP) <= 1.2.5.2 - Cross-Site Request Forgery to Arbitrary Ban Deletion
High
CVE-2022-1329
Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution
High
CVE-2022-1112
Autolinks <= 1.0.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-0783
Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQL Injection
Critical
CVE-2022-0785
Daily Prayer Time < 2022.03.01 - Unauthenticated SQL Injection
Medium
CVE-2022-0898
IgniteUp – Coming Soon and Maintenance Mode <= 3.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
74d222b9-22e9-485d-8111-d3bee505b200
Wbcom Designs Plugins (Various Versions) - Arbitrary Plugin Installation, Activation and Deactivation
High
CVE-2022-0656
Web To Print Shop : uDraw <= 3.3.3 - Unauthenticated Arbitrary File Access
Critical
CVE-2022-0657
5 Stars Rating Funnel <= 1.2.53 - Unauthenticated SQL Injection
Critical
CVE-2021-24915
Contest Gallery – Photo Contest Plugin for WordPress <= 13.1.0.5 - SQL Injection
Critical
CVE-2022-0769
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 3.1.0 - Unauthenticated SQL Injection
Medium
CVE-2022-0948
Order Listener for WooCommerce – Play Sounds Instantly on New Orders <= 3.2.1 - Unauthenticated SQL Injection
High
CVE-2022-1008
Catch Themes Demo Import <= 3.0.2 - Authenticated (Admin+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.