Medium
CVE-2022-2877
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-2737
WP STAGING – Backup Duplicator & Migration <= 2.9.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
12b4d9e6-761f-4857-a701-7d22d4ee0288
Make, formerly Integromat Connector <= 1.5.1 - Missing Authorization to Arbitrary Options Update
Medium
0c80cbad-39ea-4f75-a025-6b9667560845
Float to Top Button <= 2.3.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
08c957fb-05e8-489e-846e-1afb0ca6750f
Gallery PhotoBlocks <= 1.2.8 - Missing Authorization Checks
High
CVE-2022-2818
Cockpit Content Platform vulnerable to 2FA bypass
High
CVE-2020-23622
4thline cling uPnP protocol issue can lead to denial of service
Medium
ecbb40a5-3e33-4084-a19b-daf014ce68c8
Affiliates Manager <= 2.9.13 - Reflected Cross-Site Scripting
High
ddd37b7a-3ef8-4269-ba3b-665ae34bde26
Affiliates Manager <= 2.9.13 - Cross-Site Request Forgery
Critical
CVE-2022-2798
Affiliates Manager <= 2.9.13 - CSV Injection
Medium
CVE-2022-2913
Login No Captcha reCAPTCHA <= 1.6.11 - CAPTCHA Bypass via Whitelisted IP Address Spoofing
Medium
CVE-2022-2799
Affiliates Manager <= 2.9.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
b85e9bf4-0006-402a-ae46-a02fa854d995
Corner Ad <= 1.0.53 - Reflected Cross-Site Scripting
Medium
7047d53e-c9e4-46f9-8b5f-3489a1fb7e97
Database Management tool – Adminer <= 1.1.5 - Information Exposure
Medium
5dde4850-347f-40e6-9cea-87284aa655e7
Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2022-2271
WP Database Backup <= 5.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
5414259c-339d-41fe-a0dc-4d4e4d966e15
Debug Bar ElasticPress <= 2.1.0 - Cross-Site Scripting
High
CVE-2022-2846
Calendar Event Multi View <= 1.4.06 - Missing Authorization to Stored Cross-Site Scripting
Medium
342d90e1-9d2e-4262-9667-013a8506727b
Helpful <= 4.5.14 - Authorization Bypass to Repeat Voting
Medium
CVE-2022-2543
Visual Portfolio, Photo Gallery & Post Grid <= 2.17.1 - Unauthenticated CSS Injection
Medium
CVE-2022-2597
Visual Portfolio, Photo Gallery & Post Grid <= 2.18.0 - Contributor+ CSS Injection
Medium
66519150-7719-4598-8302-b3437719f0a0
All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting
High
4752b3a7-dbb0-4326-bfff-b94dd55b4bf1
Multivendor Marketplace Solution for WooCommerce – WC Marketplace <= 3.8.11.8 - Local File Inclusion
Medium
370e816c-920a-4e53-a2f8-afe2806c9df3
Fast Flow <= 1.2.11 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.