Medium
CVE-2022-25612
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2022-1020
Product Table for WooCommerce <= 3.1.2 - Missing Authorization
Medium
cda2465e-b17e-4b5c-ad86-3c3c7a354d03
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure
Medium
CVE-2022-0919
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure
Critical
CVE-2022-0949
WP Block and Stop Bad Bots <= 6.92 - SQL Injection
Medium
CVE-2022-0271
LearnPress <= 4.1.5 - Reflected Cross-Site Scripting
High
CVE-2022-0989
NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality
Medium
CVE-2022-0447
Post Grid < 2.1.16 - Reflected Cross-Site Scripting
Medium
CVE-2021-24986
Post Grid <= 2.1.15 - Cross-Site Scripting
Medium
CVE-2021-24987
Social Share, Social Login and Social Comments < 7.13.30 - Reflected Cross-Site Scripting
Medium
CVE-2022-0837
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam
Critical
CVE-2022-0846
SpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQL Injection
Medium
CVE-2022-0833
Church Admin <= 3.4.134 - Cross-Site Request Forgery leading to Plugin Backup Disclosure
Critical
CVE-2022-0479
Popup Builder <= 4.1.0 - SQL Injection
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
CVE-2021-36833
MC4WP: Mailchimp for WordPress <= 4.8.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
bd57edf5-a75e-4677-a51e-9dd262eeba4a
MC4WP: Mailchimp for WordPress < 4.8.7 - Cross-Site Scripting
Critical
CVE-2022-0787
Limit Login Attempts (Spam Protection) <= 4.9.1 - Unauthenticated SQL Injection
High
CVE-2022-0679
Narnoo Distributor <= 2.5.1 - Path Traversal
Medium
CVE-2021-24978
OSMapper <= 2.1.5 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2022-0397
WPC Smart Wishlist for WooCommerce <= 2.9.3 - Reflected Cross-Site Scripting
Critical
CVE-2022-0739
BookingPress < 1.0.11 - SQL Injection
High
CVE-2022-0229
miniOrange's Google Authenticator <= 5.4.52 - Unauthenticated Arbitrary Options Deletion
Critical
CVE-2022-0747
Infographic Maker – iList <= 4.3.7 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.