High
CVE-2022-4940
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2022-4935
WCFM Marketplace <= 3.4.11 - Missing Authorization
Medium
CVE-2022-4938
WCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgery
Medium
CVE-2021-4335
Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions
Medium
CVE-2023-1525
Site Reviews <= 6.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4936
WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery
Medium
CVE-2023-1403
Weaver Xtreme Theme <= 5.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name
Medium
CVE-2023-1868
YourChannel <= 1.2.3 - Missing Authorization to Plugin Cache Reset
Medium
CVE-2023-1867
YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Settings Change
Medium
CVE-2023-1866
YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Channel Reset
Medium
CVE-2023-0891
Stagtools <= 2.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-4941
WCFM Membership <= 2.9.10 - Cross-Site Request Forgery
Medium
CVE-2023-1865
YourChannel <= 1.2.3 - Missing Authorization to Plugin Settings Reset
Critical
CVE-2022-4939
WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation
Medium
CVE-2023-1669
SEOPress <= 6.5.0.2 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2023-29003
SvelteKit vulnerable to Cross-Site Request Forgery
Critical
CVE-2020-20913
Ming-Soft MCMS vulnerable to SQL injection
Medium
CVE-2020-19697
Pandao Editor.md vulnerable to cross-site scripting (XSS) in iframe src parameter
Medium
CVE-2020-19698
Pandao Editor.md vulnerable to cross-site scripting (XSS) in editor parameter
Medium
CVE-2020-19850
Directus API vulnerable to denial of service
Medium
CVE-2023-1703
pimcore is vulnerable to cross-site scripting in Composite indices key field
Medium
CVE-2023-29236
Outdoor <= 3.9.6 - Reflected Cross-Site Scripting
High
CVE-2023-0924
Zyrex Popup <= 1.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-25057
Libsyn Publisher Hub <= 1.3.2 - Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.