Search Results (376996 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-27855 1 Fatcatapps 1 Analytics Cat 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress allows Plugin Settings Change.
CVE-2022-38137 1 Analytify 1 Analytify - Google Analytics Dashboard 2025-02-20 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Analytify plugin <= 4.2.2 on WordPress.
CVE-2022-42494 1 Aioseo 1 All In One Seo 2025-02-20 3 Low
Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.
CVE-2022-32587 1 Codeandmore 1 Wp Page Widget 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in CodeAndMore WP Page Widget plugin <= 3.9 on WordPress leading to plugin settings change.
CVE-2022-43488 1 Algolplus 1 Advanced Dynamic Pricing For Woocommerce 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to rule type migration.
CVE-2022-41978 1 Zohocorp 1 Zoho Crm Lead Magnet 2025-02-20 8.8 High
Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress.
CVE-2022-45072 1 Wpml 1 Wpml 2025-02-20 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.
CVE-2022-45071 1 Wpml 1 Wpml 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.
CVE-2022-38461 1 Wpml 1 Wpml 2025-02-20 5.4 Medium
Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the default behavior for media content).
CVE-2022-45066 1 Thriveweb 1 Wooswipe Woocommerce Gallery 2025-02-20 5.4 Medium
Auth. (subscriber+) Broken Access Control vulnerability in WooSwipe WooCommerce Gallery plugin <= 2.0.1 on WordPress.
CVE-2022-36357 1 Webpsilon 1 Ultimate Tables 2025-02-20 6.1 Medium
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Webpsilon ULTIMATE TABLES plugin <= 1.6.5 versions.
CVE-2022-40192 1 Gvectors 1 Wpforo Forum 2025-02-20 7.1 High
Cross-Site Request Forgery (CSRF) vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.
CVE-2022-45069 1 Automattic 1 Crowdsignal Dashboard 2025-02-20 6.3 Medium
Auth. (contributor+) Privilege Escalation vulnerability in Crowdsignal Dashboard plugin <= 3.0.9 on WordPress.
CVE-2022-38974 1 Wpml 1 Wpml 2025-02-20 4.3 Medium
Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs.
CVE-2022-41840 1 Welcart 1 Welcart E-commerce 2025-02-20 7.5 High
Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.
CVE-2022-40686 1 Constantcontact 1 Creative Mail 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.
CVE-2022-41805 1 Booster 1 Booster For Woocommerce 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Booster for WooCommerce plugin <= 5.6.6 on WordPress.
CVE-2022-40687 1 Constantcontact 1 Creative Mail 2025-02-20 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress.
CVE-2022-41692 1 Dwbooster 1 Appointment Hour Booking 2025-02-20 4.3 Medium
Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.
CVE-2022-41781 1 Permalink Manager Lite Project 1 Permalink Manager Lite 2025-02-20 6.5 Medium
Broken Access Control vulnerability in Permalink Manager Lite plugin <= 2.2.20 on WordPress.