High
CVE-2022-4324
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2022-4302
White Label CMS <= 2.4 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2022-4120
Stop Spammers Security <= 2022.5 - Unauthenticated PHP Object Injection
High
CVE-2022-4161
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_start
Medium
CVE-2022-3679
Starter Templates by Kadence WP <= 1.2.16 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-4029
Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Value
High
CVE-2022-4030
Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion
High
CVE-2022-45845
Smart Slider 3 <= 3.5.1.9 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2022-3900
Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection
High
CVE-2022-45077
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2022-3359
Shortcodes and extra features for Phlox theme <= 2.10.5 - PHP Objection Injection
High
CVE-2022-3490
Checkout Field Editor <= 1.7.2 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-3511
Awesome Support <= 6.1.1 - Insecure Direct Object Reference to (Subscriber+) Ticket Export
High
CVE-2022-0421
Five Star Restaurant Reservations <= 2.4.11 - Missing Authorization to Stored Cross-Site Scripting
High
CVE-2022-3334
Easy WP SMTP <= 1.4.9 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3380
Customizer Export/Import <= 0.9.4 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3374
Ocean Extra <= 2.0.4 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3366
PublishPress Capabilities <= 2.5.1 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2022-3357
Smart Slider 3 <= 3.5.1.9 - PHP Object Injection
Critical
CVE-2022-3360
LearnPress <= 4.1.7.1 - Unauthenticated PHP Object Injection
High
CVE-2022-3335
Kadence WooCommerce Email Designer <= 1.5.6 - PHP Object Injection
High
CVE-2022-40671
Rate my Post – WP Rating System <= 3.3.4 - Cross-Site Request Forgery
High
CVE-2022-2903
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.12 - Authenticated (Administrator+) PHP Objection Injection
Medium
CVE-2022-2939
WP Cerber Security <= 9.0 - User Enumeration Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.