High
CVE-2022-40897
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-4549
Tickera <= 3.4.9.9 - Cross-Site Request Forgery to Plugin Data Deletion & Settings Changes
Medium
CVE-2022-4199
Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4507
Real Cookie Banner <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4295
Show All Comments <= 7.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-4653
Greenshift – animation and page builder blocks <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4464
Themify Portfolio Post <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4544
Social Media Share Buttons <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-4651
Justified Gallery <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4000
Waiting: One-click countdowns <= 0.6.2 - Cross-Site Request Forgery
Medium
CVE-2022-4655
Welcart e-Commerce <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
787a19cf-a553-4aec-96c5-978956826756
WP Spell Check <= 9.12 - Cross-Site Request Forgery
High
CVE-2023-28663
Formidable PRO2PDF <= 3.09 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-0404
Events Made Easy <= 2.3.16 - Missing Authorization
Medium
CVE-2022-4508
ConvertKit <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4698
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings
Medium
CVE-2022-4697
ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4954
Waiting: One-click countdowns <= 0.6.2 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2023-3999
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization
Medium
CVE-2022-4487
Easy Accordion <= 2.1.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-2658
WP Spell Check <= 9.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-4484
Super Socializer <= 7.13.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4658
RSSImport <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-3904
MonsterInsights <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via Google Analytics
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.