High
CVE-2022-25895
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2022-25893
vm2 vulnerable to Arbitrary Code Execution
Medium
CVE-2022-4617
Microweber vulnerable to Reflected Cross-site Scripting
Medium
CVE-2022-4465
WP Video Lightbox <= 1.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2022-4447
Fontsy <= 1.8.6 - Unauthenticated SQL Injection
Critical
CVE-2022-4101
Images Optimize and Upload CF7 <= 2.1.4 - Missing Authorization to Arbitrary File Deletion
Medium
d6421c33-152d-4e50-a96c-f97e2981b72f
RD Order Modifier for WooCommerce <= 1.0.5 - Cross-Site Request Forgery
High
CVE-2022-4327
Anti-Malware Security and Brute-Force Firewall <= 4.21.85 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2022-4460
Sidebar Widgets by CodeLights <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4330
WP Attachments <= 5.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4571
Seriously Simple Podcasting <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2022-4483
Insert Pages <= 3.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4449
Page scroll to id <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4442
Custom Post Types and Custom Fields creator <= 2.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4469
Simple Membership <= 4.2.1 - Authenticated (Contributor+) Cross Site Scripting via shortcode
Medium
CVE-2022-47442
UsersWP <= 1.2.3.9 - Authenticated (Administrator+) CSV Injection
Medium
CVE-2022-4661
Woo Products Widgets For Elementor <= 1.0.7 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2022-4451
Sassy Social Share <= 3.3.44 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4480
Click to Chat <= 3.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4486
Meteor Slides <= 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-46870
Apache Zeppelin Cross-site Scripting vulnerability
Critical
CVE-2022-46421
Apache Airflow Hive Provider vulnerable to Command Injection
High
CVE-2022-25940
lite-server vulnerable to Denial of Service
Critical
CVE-2022-25904
safe-eval vulnerable to Prototype Pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.