Critical
CVE-2020-28433
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Critical
CVE-2020-28425
curljs Command Injection vulnerability
Critical
CVE-2020-28423
monorepo-build Command Injection vulnerability
Medium
CVE-2022-2537
WooCommerce PDF Invoices & Packing Slips 2.14.0 - 3.0.0 - Reflected Cross-Site Scripting
High
CVE-2022-2261
WPIDE – File Manager & Code Editor <= 2.6 - Authenticated (Admininstrator+) Local File Inclusion
Medium
CVE-2022-2267
Mailchimp for WooCommerce <= 2.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2022-2556
Mailchimp for WooCommerce <= 2.7.1 - Authenticated (Admin+) Server-Side Request Forgery
Critical
CVE-2022-35924
NextAuth.js before 4.10.3 and 3.29.10 sending verification requests (magic link) to unwanted emails
Medium
CVE-2022-2596
node-fetch Inefficient Regular Expression Complexity
High
CVE-2022-2559
Fluent Support <= 1.5.7 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2022-38703
MaxButtons <= 9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-36346
WordPress Button Plugin MaxButtons <= 9.2 - Cross-Site Request Forgery
High
CVE-2021-36852
WP Hotel Booking <= 1.10.5 - Cross-Site Request Forgery
Medium
CVE-2022-36371
My Calendar <= 3.3.16 - Open Redirect
High
CVE-2022-2233
Banner Cycler <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
High
CVE-2021-36861
Rich Reviews by Starfish <= 1.9.14 - Cross-Site Request Forgery
High
CVE-2022-36288
Download Manager <= 3.2.48 - Cross-Site Request Forgery
Medium
391d65a7-1675-4eae-b129-a1208cd95669
Social Slider Feed <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-34347
Download Manager <= 3.2.48 - Cross-Site Request Forgery to Plugin Settings Update
Critical
CVE-2022-36296
ActiveDEMAND <= 0.2.27 - Missing Authorization Checks
Critical
CVE-2022-34149
WP OAuth Server <= 3.0.4 - Authentication Bypass
Low
CVE-2022-31177
Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings
Medium
CVE-2022-2589
Fava vulnerable to reflected cross-site scripting
Medium
CVE-2022-2362
Download Manager <= 3.2.49 - IP Blocking Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.