Medium
CVE-2022-3961
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-3832
External Media <= 1.0.35 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-4125
Popup Manager <= 1.6.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2022-4169
Theme and plugin translation for Polylang <= 3.2.16 - Missing Authorization
Medium
CVE-2022-41640
Wholesale Suite <= 2.1.5 - Authenticated (Subscriber+) Cross-Site Scripting
High
CVE-2022-4106
Wholesale Market for WooCommerce <= 1.0.6 - Unauthenticated Arbitrary File Download
Medium
CVE-2022-4058
Photo Gallery <= 1.8.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-4555
WP Shamsi <= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivation
Medium
CVE-2022-4948
FlyingPress <= 3.9.6 - Missing Authorization
Medium
CVE-2022-4108
Wholesale Market for WooCommerce <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Download
Critical
CVE-2022-4050
JoomSport <= 5.2.7 - Unauthenticated SQL Injection
High
3b71805c-15bb-4cde-b91f-4f3e9b7ab520
Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery
Critical
CVE-2022-4063
InPost Gallery <= 2.1.4.1 - Local File Inclusion
Medium
CVE-2022-4024
Pie Register <= 3.8.1.2 - Missing Authorization to Arbitrary User Deletion
Medium
CVE-2022-4124
Popup Manager <= 1.6.6 - Missing Authorization to Arbitrary Popup Deletion
High
04bdc2ef-a7aa-45a7-b600-be832eefa32e
Better Click To Tweet <= 5.10.3 - Cross-Site Request Forgery
High
CVE-2022-24999
qs vulnerable to Prototype Pollution
Medium
7d047fe7-bf00-4f93-91d2-c5da41664bfc
Age Gate <= 2.13.4 - Open Redirect
Medium
CVE-2022-40206
wpForo Forum <= 2.0.5 - Insecure Direct Object Reference to Forum Privacy Change
Critical
CVE-2022-45907
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
Medium
CVE-2022-45844
Organization chart <= 1.4.1 - Missing Authorization
High
CVE-2022-4972
Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export
High
CVE-2022-3994
Authenticator <= 1.3.0 - Missing Authorization
High
61992821-a053-4bc6-853a-1a826d096746
Uncanny Toolkit for LearnDash <= 3.6.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.