Medium
CVE-2022-0779
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 378
Reset filters
Medium
CVE-2022-1562
Enable SVG <= 1.3.1 - Cross-Site Scripting via SVG
High
CVE-2022-1407
VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-28290
WordPress Country Selector <= 1.6.5 - Reflected Cross-Site Scripting via AJAX call of check_country_selector
High
CVE-2021-25048
Page Builder KingComposer <= 2.9.6 - Authenticated Arbitrary Profile Creation and Stored Cross-Site Scripting
Medium
CVE-2022-0537
MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution
Medium
0ddb582a-e966-4c0b-a743-29d8943f846b
WordPress Core 5.9 - 5.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-0830
FormBuilder <= 1.08 - Cross-Site Request Forgery
Medium
CVE-2022-0450
Menu Image, Icons made easy <= 3.0.7 - Authenticated Cross-Site Scripting
High
CVE-2022-0818
WooCommerce Affiliate Plugin - Coupon Affiliates < 4.16.4.5 - Stored Cross-Site Scripting
High
CVE-2022-0834
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
Medium
CVE-2022-0423
3D FlipBook <= 1.12.0 - Subscriber+ Stored Cross-Site Scripting
Medium
CVE-2022-22734
Simple Quotation <= 1.3.2 - Cross-Site Request Forgery
High
CVE-2022-23988
WS Form LITE and WS Form Pro < 1.8.176 - Stored Cross-Site Scripting
Medium
CVE-2021-24814
WordPress GDPR & CCPA < 1.9.26 - Reflected Cross-Site Scripting
Medium
CVE-2022-0220
WordPress GDPR & CCPA <= 1.9.26 Reflected Cross-Site Scripting
Medium
CVE-2021-24928
Rearrange Woocommerce Products <= 3.0.7 - Subscriber+ SQL Injection
Medium
CVE-2021-24879
SupportCandy – Helpdesk & Support Ticket System <= 2.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2021-33852
Post Duplicator <= 2.23 - Cross-Site Scripting
Medium
CVE-2021-33851
Customize Login Image <= 3.4 - Cross-Site Scripting
Medium
CVE-2021-24964
LiteSpeed Cache <= 4.4.3 - Authorization Bypass
Medium
CVE-2021-24988
WP RSS Aggregator <= 4.19.2 - Subscriber+ Stored Cross-Site Scripting
High
CVE-2021-36916
Hide My WP <= 6.2.3 - SQL Injection
Medium
CVE-2021-24958
Meks Easy Photo Feed Widget < 1.2.4 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.