Critical
CVE-2022-1020
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Medium
cda2465e-b17e-4b5c-ad86-3c3c7a354d03
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.6.7 - Email Address Disclosure
Medium
CVE-2022-0661
Ad Injection <= 1.2.0.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-0765
Loco Translate <= 2.6.0 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2022-1001
WP Downgrade <= 1.2.2 - Admin+ Stored Cross-Site Scripting
Critical
CVE-2022-26184
Poetry before v1.1.9 contains Untrusted Search Path
High
CVE-2022-24775
guzzlehttp/psr7 <= 1.84 and 2.0.0-2.1.0 - Improper Input Validation
Medium
CVE-2022-25609
Yoo Slider plugin <= 2.0.0 - Stored Cross-Site Scripting
Medium
CVE-2022-25608
Yoo Slider – Image Slider & Video Slider <= 2.0.0 - Cross-Site Request Forgery
Critical
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
High
CVE-2022-1006
Advanced Booking Calendar <= 1.7.0 - Authenticated SQL Injection
Medium
CVE-2022-0531
Migration, Backup, Staging – WPvivid <= 0.9.69 - Reflected Cross-Site Scripting via sub_page Parameter
High
CVE-2022-0920
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Information Disclosure
Medium
CVE-2022-0840
Easy Social Icons <= 3.2.0 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0919
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure
Medium
CVE-2022-1208
Ultimate Member <= 2.3.2 - Stored Cross-Site Scripting
Medium
CVE-2022-1007
Advanced Booking Calendar <= 1.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2022-0914
Export All URLs <= 4.2 - Cross-Site Request Forgery to Sensitive Data Export
Medium
CVE-2022-0969
Image optimization & Lazy Load <= 3.3.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0892
Export All URLs <= 4.1 - Reflected Cross-Site Scripting
High
CVE-2022-1023
Podcast Importer SecondLine < 1.3.8 - SQL Injection
Medium
CVE-2022-0471
Favicon by RealFaviconGenerator <= 1.3.22 - Reflected Cross-Site Scripting
Critical
CVE-2022-26265
Remote Code Execution in Contao Managed Edition
High
CVE-2022-0991
Insufficient Session Expiration in Admidio
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.