High
CVE-2022-21705
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Unrated
drupal-contrib-2022-027
drupal/govuk_theme - SA-CONTRIB-2022-027
Unrated
drupal-contrib-2022-026
drupal/entity_reference_tree - SA-CONTRIB-2022-026
High
CVE-2022-0736
Insecure Temporary File in mlflow
Medium
CVE-2022-0665
Path traversal in pimcore
High
CVE-2022-0687
Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload
Medium
CVE-2022-0627
Amelia <= 1.0.46 - Reflected Cross-Site Scripting
Medium
CVE-2022-4931
BackupWordPress <= 3.12 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2022-0616
Amelia <= 1.0.46 - Cross-Site Request Forgery
High
Exploited in attacks
CVE-2022-0609
Use after free in Animation
High
CVE-2022-23647
Cross-site Scripting in Prism
Medium
CVE-2022-25600
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.2.3 - Cross-Site Request Forgery
Medium
CVE-2022-25603
MaxGalleria <= 6.2.5 - Stored Cross-Site Scripting
Medium
CVE-2022-0691
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Medium
CVE-2022-0590
BulletProof Security <= 5.7 - Admin+ Stored Cross-Site Scripting
High
5cbf597e-7a2f-416c-8969-3679b487f57a
WooCommerce <= 6.2.0 - Path Traversal via Tax Importer
High
CVE-2021-24905
Advanced Contact form 7 DB <= 1.8.6 - Authenticated Arbitrary File Deletion
Medium
CVE-2022-0775
WooCommerce <= 6.2.0 - Incorrect Authorization Checks on REST API Endpoints
Critical
CVE-2022-0686
Authorization Bypass Through User-Controlled Key in url-parse
Low
CVE-2022-0688
Business Logic Errors in microweber
Critical
CVE-2022-23848
Command injection in Alluxio
Medium
CVE-2022-0648
Team Circle Image Slider With Lightbox <= 1.0.15 - Reflected Cross-Site Scripting
High
CVE-2022-0478
Event Manager and Tickets Selling for WooCommerce < 3.5.8 - SQL Injection
Medium
CVE-2022-0701
Seo 301 Meta <= 1.9.1 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.