Medium
CVE-2022-4829
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-4783
Youtube Channel Gallery <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2022-45143
Apache Tomcat improperly escapes input from JsonErrorReportValve
Critical
CVE-2021-32824
Apache Dubbo vulnerable to remote code execution via Telnet Handler
High
CVE-2021-32821
MooTools Regular Expression Denial of Service
High
CVE-2022-47551
Apiman has potential permissions bypass
High
CVE-2015-10012
FrameworkUserBundle Generates Error Message Containing Sensitive Information
Medium
CVE-2022-4472
Simple Sitemap <= 3.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4671
PixCodes <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-46820
Joli Table of Contents <= 1.3.9 - Cross-Site Request Forgery
Medium
CVE-2022-45830
Analytify <= 4.2.3 - Missing Authorization & Cross-Site Request Forgery
High
CVE-2023-0038
Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4828
Bold Timeline Lite <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
997b028c-8131-4579-8157-caecf099d7ec
Knowledge Base <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block
Medium
CVE-2022-4699
MediaElement.js – HTML5 Video & Audio Player <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4763
Icon Widget <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-47145
WordPress Bitcoin Payments – Blockonomics <= 3.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-0033
PDF Viewer <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4765
Portfolio for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
462372ab-8f83-4b75-b3dd-674199e1eeee
Mailjet Email Marketing <= 5.3 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-4834
CPT Bootstrap Carousel <= 1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4663
Members Import <= 1.4.2 - Self Cross-Site Scripting
High
CVE-2022-47427
My Calendar <= 3.3.24.1 - Cross-Site Request Forgery
Medium
CVE-2022-4781
Accordion Shortcodes <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.