Medium
CVE-2022-40310
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2022-33142
Better Messages <= 1.9.10.57 - Resource Exhaustion
Medium
CVE-2022-36371
My Calendar <= 3.3.16 - Open Redirect
High
CVE-2021-36861
Rich Reviews by Starfish <= 1.9.14 - Cross-Site Request Forgery
Medium
CVE-2022-2600
Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing
Medium
e532a2b4-0fb4-4256-89a9-435b55d9de91
WordPress Membership, User Registration, Login Form, User Profile & Restrict Content Plugin – ProfilePress <= 3.2.15 - Reflected Cross-Site Scripting
Low
CVE-2022-25858
terser (JS Package) < 5.14.2 - Denial of Service
High
CVE-2022-1576
WP Maintenance Mode & Coming Soon <= 2.4.4 - Cross-Site Request Forgery
Critical
df46b3d5-a433-47b5-99b8-117591f7dd16
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.10 - Code Injection
Medium
CVE-2022-29432
wpDataTables <= 2.1.27 - Authenticated Cross-Site Scripting
Critical
CVE-2022-0657
5 Stars Rating Funnel <= 1.2.53 - Unauthenticated SQL Injection
Critical
CVE-2022-0769
Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin <= 3.1.0 - Unauthenticated SQL Injection
Medium
CVE-2021-25094
Tatsu <= 3.3.12 - Unauthenticated Remote Code Execution
Medium
CVE-2022-1001
WP Downgrade <= 1.2.2 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Medium
bd57edf5-a75e-4677-a51e-9dd262eeba4a
MC4WP: Mailchimp for WordPress < 4.8.7 - Cross-Site Scripting
Medium
CVE-2022-0442
UsersWP <= 1.2.3 - Subscriber+ User Avatar Override
Medium
e09e48db-f74a-4663-a724-24938a6c277c
Multiple Themes (Various Versions) - Reflected Cross-Site Scripting
Medium
CVE-2022-23980
Yasr – Yet Another Stars Rating <= 2.9.9 - Cross-Site Scripting via source
Medium
CVE-2022-0377
LearnPress <= 4.1.4.1 - Arbitrary Image Renaming
Medium
CVE-2021-25060
Five Star Business Profile and Schema <= 2.1.6 - Subscriber+ Page Creation & Settings Update to Stored Cross-Site Scripting
Medium
CVE-2022-0233
ProfileGrid – User Profiles, Memberships, Groups and Communities <= 4.7.4 - Stored Cross-Site Scripting via Profile
Medium
CVE-2021-24686
SVG Support <= 2.3.19 Admin+ Cross-Site Scripting
Medium
ea5215b3-fd25-4ca5-b651-18c935aa2ca0
AF Companion <= 1.1.2 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.