High
CVE-2022-3500
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2022-26884
Apache DolphinScheduler vulnerable to Path Traversal
High
CVE-2022-3383
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Select
Medium
CVE-2022-43492
Comments – wpDiscuz <= 7.4.2 - Insecure Direct Object References
High
CVE-2022-1578
My wpdb <= 1.1.12 - Cross-Site Request Forgery to Arbitrary SQL Query Execution
High
CVE-2022-40687
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Settings Disconnect
High
CVE-2022-3384
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_options
High
CVE-2022-44740
Creative Mail <= 1.5.4 - Cross-Site Request Forgery
Critical
CVE-2022-42497
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary Code Execution
Medium
CVE-2022-43461
Slideshow SE <= 2.5.5 - Authenticated (Subscriber+) Cross-Site Scripting
Medium
CVE-2022-3361
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes
Medium
CVE-2022-3739
WP Best Quiz <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2022-3750
Ask Me < 6.8.7 - Cross-Site Request Forgery
Critical
CVE-2022-42698
Api2Cart Bridge Connector <= 1.1.0 - Arbitrary File Upload
High
CVE-2022-41135
Customizable WordPress Gallery Plugin – Modula Image Gallery <= 2.6.9 - Missing Authorization to Plugin Settings Change
High
CVE-2022-40686
Creative Mail <= 1.5.4 - Cross-Site Request Forgery to Plugin Deactivation
Medium
CVE-2022-42494
All in One SEO Pro <= 4.2.5.1 - Authenticated (Admin+) Server Side Request Forgery
Medium
CVE-2022-2445
Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2022-41554
Slideshow SE <= 2.5.5 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2022-43471
WP Bootstrap Gallery <= 1.1 - Missing Authorization
High
CVE-2022-39357
Prototype pollution in Snowboard framework
Critical
CVE-2022-3363
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.
Medium
CVE-2021-36858
Testimonials <= 2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
c3172e21-c2e4-4ec0-ad0f-4433303efcfb
Syncee for Suppliers <= 1.0.5 - Missing Authorization to Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.