High
d2031289-eaf3-4a1b-8771-769c08d99ca3
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2022-4256
All-in-One Addons for Elementor - WidgetKit <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-3862
Livemesh Addons for Elementor <= 7.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-3764
Form Vibes <= 1.4.5 - Authenticated (Admininstrator+) SQL Injection
High
CVE-2022-3805
Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass
Medium
CVE-2022-3794
Jeg Elementor Kit <= 2.5.6 - Authorization Bypass
High
CVE-2022-3604
Contact Form Entries <= 1.2.9 - CSV Injection
High
CVE-2022-33970
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.1.2 - Authenticated Arbitrary Options Update
Medium
CVE-2022-2116
Contact Form DB - Elementor <= 1.7 - Reflected Cross-Site Scripting
Medium
85551ba1-6d6e-47a0-864f-f9d0a0a11056
Shortcodes and extra features for Phlox theme <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2022-34487
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.0.2 - Unauthenticated Arbitrary Options Update
Medium
CVE-2022-29406
WordPress Team Manager <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-29455
Elementor Website Builder <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting
Medium
f708e910-7745-4ff5-9f9f-5552dbaf1113
Elementor Contact Form DB <= 1.5 - Sensitive Information Disclosure
Medium
CVE-2022-1266
Post Grid, Slider & Carousel Ultimate <= 1.4.3 - Authenticated (Admin+) Cross-Site Scripting
Medium
231dbf87-2e17-4b4b-9eac-34a8b4a791ba
Elements For Elementor <= 1.9 - Stored Cross-Site Scripting
High
CVE-2022-1442
Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure
High
CVE-2022-1329
Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution
High
CVE-2022-4950
Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
CVE-2022-0327
Master Addons for Elementor <= 1.8.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-0683
Essential Addons for Elementor Lite <= 5.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2022-23180
Contact Form & Lead Form Elementor Builder < 1.7.4 - Arbitrary Settings Change
Critical
CVE-2022-0320
Essential Addons for Elementor <= 5.0.4 - Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.