Medium
CVE-2022-0864
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
Medium
CVE-2022-0531
Migration, Backup, Staging – WPvivid <= 0.9.69 - Reflected Cross-Site Scripting via sub_page Parameter
Medium
CVE-2022-0246
iQ Block Country < 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip
Medium
CVE-2022-0833
Church Admin <= 3.4.134 - Cross-Site Request Forgery leading to Plugin Backup Disclosure
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
CVE-2022-4932
Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2022-4931
BackupWordPress <= 3.12 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2022-0633
UpdraftPlus WordPress Backup Plugin < 1.22.3 - Sensitive Information Disclosure
High
CVE-2021-24216
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2021-24994
Migration, Backup, Staging – WPvivid <= 0.9.68 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-0255
Database Backup for WordPress <= 2.5 - Admin+ SQL Injection
Medium
CVE-2021-25089
UpdraftPlus WordPress Backup Plugin <= 1.16.68 - Reflected Cross-Site Scripting via updraft_restore
Medium
CVE-2021-25035
Backup and Staging by WP Time Capsule <= 1.22.6 - Reflected Cross-Site Scripting
Medium
CVE-2021-25022
UpdraftPlus WordPress Backup Plugin <= 1.16.65 - Reflected Cross-Site Scripting
Medium
CVE-2021-36884
Backup Migration <= 1.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
e758b973-dc2f-4bcf-9846-56ddd73f38db
Backup and Restore plugin – WordPress <= 1.0.3 - Authenticated (Admin+) Arbitrary File Deletion
High
CVE-2021-24866
WP Data Access <= 4.3.1 - Admin+ SQL Injection
High
CVE-2021-24877
MainWP Child <= 4.1.7.1 - SQL Injection via orderby, order Parameters
Medium
CVE-2021-39327
BulletProof Security <= 5.1 - Sensitive Information Disclosure
Medium
255f0fc4-5023-4039-9418-2f28363dbfc4
Migration, Backup, Staging – WPvivid <= 0.9.55 - Reflected Cross-Site Scripting
High
40d80e47-3411-4e70-8a20-2e698daad6e7
UpdraftPlus < 1.16.59 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2021-24426
Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting
Medium
CVE-2021-24374
JetPack <= 9.7 - Information Disclosure
Medium
CVE-2021-24322
Database Backup for WordPress <= 2.3.3 - Authenticated Stored Cross-Site Scripting via backup_receipient Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.