Critical
ghsa-32gv-6cf3-wcmq
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-24762
Leaking of user information on Cross-Domain communication in sysend
Medium
CVE-2022-24749
Improper sanitize of SVG files during content upload ('Cross-site Scripting') in sylius/sylius
High
CVE-2022-24743
Insufficient Session Expiration in Sylius
Medium
CVE-2022-24742
Sensitive Information Exposure in Sylius
Medium
CVE-2022-24740
Sudden swap of user auth tokens in Volto
Medium
CVE-2022-24733
Improper Restriction of Rendered UI Layers or Frames in Sylius
High
CVE-2021-25048
Page Builder KingComposer <= 2.9.6 - Authenticated Arbitrary Profile Creation and Stored Cross-Site Scripting
Medium
c793d7ad-987f-4b44-92aa-d0fdd66aa537
Members List Plugin <= 4.3.6 - Reflected Cross-Site Scripting
Medium
CVE-2022-0837
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam
Medium
CVE-2021-25113
Dropdown Menu Widget <= 1.9.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-0537
MapPress Maps for WordPress <= 2.73.12 - Admin+ File Upload to Remote Code Execution
Medium
CVE-2022-0958
Mark Posts <= 2.0.0 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-0825
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure
High
CVE-2022-0403
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Medium
CVE-2022-0929
Cross-site Scripting in microweber
Medium
CVE-2022-0926
Cross-site Scripting in microweber
Medium
CVE-2022-0880
Cross-site Scripting in ShowDoc
High
CVE-2022-0930
Cross-site Scripting in microweber
High
CVE-2020-36518
Deeply nested json in jackson-databind
Medium
CVE-2018-25031
Spoofing attack in swagger-ui
Medium
CVE-2021-46708
Spoofing attack in swagger-ui-dist
High
CVE-2022-0913
Integer Overflow or Wraparound in Microweber
Medium
CVE-2022-0912
Unrestricted Upload of File with Dangerous Type in microweber
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.