Medium
CVE-2022-46851
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
CVE-2023-23820
ProfilePress <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
High
CVE-2022-4265
Replyable – Subscribe to Comments and Reply by Email <= 2.2.9 - Authenticated (Subscriber+) PHP Object Injection via prompt_dismiss_notice
Medium
CVE-2022-25881
http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)
Critical
CVE-2023-0232
WooLentor <= 2.5.3 - PHP Object Injection
High
CVE-2022-25860
simple-git < 3.16.0 - Remote Code Execution
Medium
CVE-2023-23996
ProfilePress <= 4.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-23649
MainWP Links Manager Extension <= 2.1 - Unauthenticated PHP Object Injection
High
CVE-2022-46867
Universal Star Rating <= 2.1.0 - Cross-Site Request Forgery
High
CVE-2022-4489
HUSKY – Products Filter for WooCommerce Professional <= 1.3.1 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-4710
Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scripting
Medium
CVE-2022-4680
Revive Old Posts <= 9.0.10 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-4673
Rate my Post – WP Rating System <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4698
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings
Medium
CVE-2022-4697
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-4327
Anti-Malware Security and Brute-Force Firewall <= 4.21.85 - Authenticated (Admin+) PHP Object Injection
High
CVE-2022-3417
WPtouch <= 4.3.44 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-3855
404 to Start <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-45083
ProfilePress <= 4.3.2 - Authenticated (Admin+) PHP Object Injection
High
CVE-2022-4043
WP Custom Admin Interface <= 7.28 - Authenticated (Administrator+) PHP Object Injection
Medium
b290e792-2473-4ba5-b66c-b6ca65445c0e
Responsive Starter Templates – Elementor & WordPress Templates <= 2.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
9e2214d8-b22d-4e51-a0cf-cca1af8e761c
Responsive Starter Templates – Elementor & WordPress Templates <= 2.6.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4417
WP Cerber Security <= 9.3.2 - User Enumeration Bypass via REST API
Medium
21dbe11c-8c9f-4b4c-98ef-3ba6eb5bb686
Universal Star Rating <= 1.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.