High
CVE-2022-23607
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2021-23760
Prototype Pollution in keyget
High
CVE-2021-23558
Prototype Pollution in bmoor
Medium
CVE-2022-0394
Cross-site Scripting in LiveHelperChat
Medium
ghsa-f7qw-5fgj-247x
Cross-site Scripting and Open Redirect in plone.app.contenttypes
High
CVE-2021-43859
Denial of Service by injecting highly recursive collections or maps in XStream
High
CVE-2022-23596
Junrar vulnerable to infinite loop via extracting carefully crafted RAR archive
High
CVE-2022-23601
CSRF token missing in Symfony
Critical
CVE-2021-23484
Exposure of Resource to Wrong Sphere in Zip-Local
High
CVE-2022-23181
Race condition in Apache Tomcat
High
CVE-2021-23460
Prototype pollution in min-dash
Medium
CVE-2021-4172
Cross-site Scripting in showdoc
Medium
CVE-2022-23180
Contact Form & Lead Form Elementor Builder < 1.7.4 - Arbitrary Settings Change
Critical
CVE-2022-0434
Page Views Count Plugin <= 2.4.14 - Unauthenticated SQL Injection
Medium
CVE-2021-25098
Easy Pricing Tables <= 3.1.2 - Arbitrary Post Removal via Cross-Site Request Forgery
Medium
CVE-2022-0426
Product Feed PRO for WooCommerce <= 11.2.1 - Reflected Cross-Site Scripting
High
CVE-2021-24952
Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection
Medium
CVE-2021-24821
Cost Calculator <= 1.5 - Contributor+ Stored Cross-Site Scripting
High
CVE-2021-24820
Cost Calculator <= 1.8 - Authenticated Local File Inclusion
Critical
CVE-2022-0441
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
Medium
CVE-2022-21659
Observable Response Discrepancy in Flask-AppBuilder
High
CVE-2022-0383
WP Review Slider < 11.0 - SQL Injection
High
CVE-2021-24959
WP Email Users <= 1.7.6 - SQL Injection
Critical
CVE-2022-0412
TI WooCommerce Wishlist / TI WooCommerce Wishlist Pro < 1.40.1 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.