High
CVE-2022-3517
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
ff4b47d8-28c1-4706-91d9-0285f419147e
WordPress Core < 6.0.3 - SQL Injection via WP_Date_Query
Medium
fa139703-e83e-4a19-a801-464b72a2acc4
WordPress Core < 6.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting via Comments
Medium
CVE-2022-43504
WordPress Core < 6.0.3 - Information Disclosure (Email Address)
High
ddd06190-d0c1-445d-8c6f-4c7df3248db4
WordPress Core < 6.0.3 - Cross-Site Request Forgery via wp-trackback.php
High
CVE-2022-43497
WordPress Core < 6.0.3 - Reflected Cross-Site Scripting via SQL Injection
Medium
CVE-2022-40696
Advanced Custom Fields <= 6.0.2 - Authenticated (Contributor+) Information Disclosure
High
CVE-2022-3415
Chat Bubble <= 2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
4394f96a-ceb5-463f-b454-a6fa4a59fc45
WordPress Core < 6.0.3 - Authenticated Information Disclosure via REST-API
Medium
CVE-2022-43500
WordPress Core < 6.0.3 & Gutenberg < 14.3.1 - Authenticated Cross-Site Scripting in Various Blocks
Medium
38979e27-2023-4f84-a708-1732b4117066
WordPress Core < 6.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Customizer
Medium
CVE-2022-3469
WP Attachments <= 5.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Low
2f0d4f48-a315-4308-a5b6-7d3f045b292f
WordPress Core < 6.0.3 - Information Disclosure (Multi-Part Email Leak)
Medium
19c88a9a-1f97-4a46-b759-9ca030d577e7
WordPress Core < 6.0.3 - Open Redirect
Low
0fcdfba2-aa19-4d0c-8880-5ee2c0680555
WordPress Core < 6.0.3 - Shared User Instance Weakness
Medium
ed42e29f-d263-43fc-b06e-b7aaaa7622f7
eCommerce Product Catalog <= 3.0.71 - Reflected Cross-Site Scripting
Medium
CVE-2022-3418
Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2022-2387
Easy Digital Downloads <= 2.11.7 - Cross-Site Request Forgery to Arbitrary Post Deletion
Critical
CVE-2022-3481
WooCommerce Dropshipping Premium <= 4.3 - Unauthenticated SQL Injection
Medium
bdb8cb7f-38fc-41d7-aa78-abe11c6402b6
Mihdan: Public Post Preview <= 1.9.9 - Missing Authorization
High
CVE-2022-2441
ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to Remote Command Execution
High
CVE-2022-3463
Contact Form Plugin by FluentForm <= 4.3.12 - CSV Injection
High
84c4e3cc-1f7c-4ed9-9072-32f3e84419c9
Booking Calendar – Event Calendar <= 1.0.2 - Missing Authorization
Critical
CVE-2022-3536
Role Based Pricing for WooCommerce <= 1.6.2 - Missing Authorization to PHAR Deserialization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.