High
CVE-2022-45470
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-45146
Garbage collection issue in BC-FJA in Java 13 and later
Critical
CVE-2022-4093
SQL injection in Dolibarr
High
CVE-2022-3981
Icegram Express <= 5.4.19 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-45353
Betheme <= 26.6.2 - Missing Authorization Checks to Private Page/Post Data Disclosure
Medium
CVE-2022-3999
WooCommerce Shipping – DPD baltic <= 1.2.54 - Missing Authorization to Arbitrary Options Deletion
Medium
CVE-2022-4097
All-In-One Security (AIOS) – Security and Firewall <= 5.0.8 - IP Spoofing to Protection Mechanism Bypass
Medium
CVE-2022-3919
Jetpack CRM <= 5.4.2 - Authenticated (Administrator+) Cross-Site Scripting
Medium
d592b81d-48c7-4b48-948d-f2b98719fdfc
Minimal Coming Soon – Coming Soon Page <= 2.33 - Authenticated (Administrator+) Cross-Site Scripting
Critical
CVE-2022-3989
Motors – Car Dealer, Classifieds & Listing <= 1.4.3 - Unauthenticated Arbitrary File Upload
High
CVE-2022-3912
User Registration <= 2.2.4 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2022-45356
Betheme <= 26.6.2 - Missing Authorization Check on Core Functionality
Medium
CVE-2022-3946
Welcart e-Commerce <= 2.8.3 - Missing Authorization
Medium
CVE-2022-3862
Livemesh Addons for Elementor <= 7.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-3935
Welcart e-Commerce <= 2.8.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2022-45351
Betheme <= 26.6.2 - Missing Authorization to Post Status Change
Critical
CVE-2022-3900
Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection
Critical
CVE-2022-3982
Booking calendar, Appointment Booking System <= 3.2.1 - Unauthenticated Arbitrary File Upload
Critical
CVE-2022-3915
Dokan <= 3.7.5 - Unauthenticated SQL Injection
Medium
CVE-2022-3880
Anti Hacker <= 4.19 - Missing Authorization to Arbitrary Plugin Install
Medium
CVE-2022-45349
Betheme <= 26.6.2 - Missing Authorization to Post Title Change
High
CVE-2022-3930
Directorist <= 7.4.2.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Medium
CVE-2022-45363
Betheme <= 26.6.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2022-3921
Listingo <= 3.2.5 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.