High
CVE-2022-31474
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
Medium
CVE-2022-2352
Post SMTP <= 2.1.6 - Authenticated (Administrator+) Blind Server-Side Request Forgery
Medium
af7adacf-7189-401f-b7c9-845eb328ca76
WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2022-2546
All-in-One WP Migration <= 7.62 - Unauthenticated Reflected Cross-Site Scripting
Medium
CVE-2022-2863
Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal
Medium
CVE-2022-2351
Post SMTP Mailer/Email Log <= 2.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-2737
WP STAGING – Backup Duplicator & Migration <= 2.9.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
5dde4850-347f-40e6-9cea-87284aa655e7
Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2022-2271
WP Database Backup <= 5.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
66519150-7719-4598-8302-b3437719f0a0
All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2022-2442
Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization
Medium
31496229-bf54-466c-a87b-cc32e65500a4
WP Database Backup <= 5.9 - Authenticated (Admin+) Stored Cross-Site Scripting
High
52daa230-1600-4ace-9adf-3f4e9be51e9f
Jupiter X Core <= 2.0.9 - Missing Authorization Checks
Critical
CVE-2022-2551
Duplicator – WordPress Migration Plugin <= 1.4.7 - Unauthenticated Backup Download
High
CVE-2022-2552
Duplicator – WordPress Migration Plugin <= 1.4.7 - Sensitive Information Disclosure
High
CVE-2022-2354
WP-DBManager <= 2.80.7 - Authenticated (Admin+) Remote Code Execution on Multi-Site
Critical
CVE-2022-1585
Project Source Code Download <= 1.0.0 - Unauthenticated Backup Download
Medium
741ad2f5-d5cf-44bc-ac4a-7894df77a3d1
Keep Backup Daily <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2022-1028
WordPress Security <= 4.2 - Admin+ Stored Cross-Site Scripting
Critical
CVE-2022-0444
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.16 - Unauthenticated Plugin Settings Reset
Medium
CVE-2022-1820
Keep Backup Daily <= 2.0.2 - Reflected Cross-Site Scripting
High
CVE-2022-1577
Database Backup for WordPress <= 2.5.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-1476
All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts
Medium
CVE-2022-27844
Migration, Backup, Staging – WPvivid <= 0.9.70 - Authenticated Arbitrary File Read
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.