Medium
CVE-2022-1387
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2022-1294
IMDB Info Box <= 2.0 - Stored Cross-Site Scripting
High
CVE-2022-1683
amtyThumb <= 4.2.0 - Authenticated SQL Injection
Medium
CVE-2022-1643
Birthdays Widget <= 1.7.18 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2014-4845
BannerMan <= 0.2.4 - Authenticated (Admin+) Cross-Site Scripting
Medium
62a6fc85-db3c-4696-8102-d0247daae56c
StaffList <= 3.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-1589
Change WP Admin Login <= 1.0.9 - Missing Authorization Checks
High
CVE-2022-1684
CUBE SLIDER <= 1.2 - Authenticated (Admin+) SQL Injection
High
CVE-2022-1688
Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via ids Parameter
Medium
CVE-2022-1564
Form Maker <= 1.14.11 - Stored Cross-Site Scripting
High
CVE-2022-1687
Logo Slider <= 1.4.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2022-1299
Slideshow <= 2.3.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-1690
Note Press <= 0.1.10 - Authenticated (Admin+) SQL Injection via id Parameter
Medium
CVE-2022-1582
External Links in New Window / New Tab <= 1.42 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-1685
Five Minute Webshop <= 1.3.2 - Authenticated (Admin+) SQL Injection via orderby
High
CVE-2022-1686
Five Minute Webshop <= 1.3.2 - Authenticated (Admin+) SQL Injection via id
Medium
CVE-2022-1568
Team Members <= 5.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2022-0642
JivoChat Live Chat – WP live chat plugin for WordPress <= 1.3.5.3 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2022-2072
Name Directory <= 1.25.2 - Cross-Site Scripting
Critical
CVE-2021-23792
External Entity Reference in TwelveMonkeys ImageIO
Critical
CVE-2021-23592
Deserialization of Untrusted Data in topthink/framework
High
CVE-2022-25324
Uncaught Exception in bignum
Medium
CVE-2022-1113
Flower Delivery by Florist One <= 3.5.8 - (Admin+) Stored Cross-Site Scripting
Critical
CVE-2022-1053
Tenant and Verifier might not use the same registrar data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.