Medium
CVE-2022-1233
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
High
CVE-2021-25086
Advanced Page Visit Counter <= 5.0.8 - Unauthenticated Cross-Site Scripting
Critical
e08d455e-925d-4a94-8d57-484aedc25411
Tipsacarrier < 1.5.0.5 - Unauthenticated SQL Injection
Medium
CVE-2022-1218
Domain Replace <= 1.3.8 - Reflected Cross-Site Scripting
Medium
9c7edcbd-83b8-405b-892a-c404947990b3
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 4.4.0 - Cross-Site Scripting and SQL Injection
Medium
61aaeca4-6b5c-4b00-ab71-bba976d9e1b5
Lucky Wheel for WooCommerce – Spin a Sale <= 1.0.10 - Cross-Site Scripting
Medium
540d2495-7ad4-428c-b86e-9af73d0ebe51
Ad Invalid Click Protector (AICP) <= 1.2.5.2 - Reflected Cross-Site Scripting and Cross-Site Request Forgery
Medium
438bbd0f-5204-4a71-9730-efa51d864832
Faculty Staff and Student Directory Plugin – Campus Directory <= 1.7.4 - Authenticated Stored Cross-Site Scripting
Medium
350719b1-0e88-4f6f-979e-0ac3d17b852b
Shortcode for Current Date <= 2.1.4 - Stored Cross-Site Scripting
High
0315f5de-7a46-4e16-b080-557ddfd180a2
Moment.js <= 2.29.1 - Directory Traversal
High
02b61eb1-a93f-4437-87de-d698af8ef9f6
Blog2Social <= 6.9.3 - PHP Object Injection
High
CVE-2022-24785
Path Traversal: 'dir/../../filename' in moment.locale
Critical
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
High
CVE-2022-24787
Incorrect Comparison in Vyper
Medium
CVE-2021-36851
Testimonials Slider <= 3.5.8.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2022-25618
wpDataTables – WordPress Tables & Table Charts Plugin <= 2.1.27 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-25613
FV Flowplayer Video Player <= 7.5.18.727 - Stored Cross-Site Scripting
Low
CVE-2022-0088
Cross-Site Request Forgery in YOURLS
Critical
CVE-2022-28368
Remote code injection in dompdf/dompdf
Medium
CVE-2022-28378
Cross-site Scripting in craftcms/cms
Medium
CVE-2022-1094
amr users <= 4.59.3 - Admin+ Stored Cross-Site Scripting
High
CVE-2022-4950
Cool Plugins (Various Versions) - Arbitrary Plugin Installation and Activation
Medium
CVE-2022-0287
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin <= 2.4.3 - Missing Authorization
Medium
6528041a-0217-43d5-bf29-9208e23aadd9
Weblizar Pin It Button On Image Hover And Post < 3.4 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.