Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2022-36394 - Contest Gallery Plugin
Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin
PLUGIN
Contest Gallery
CVE-2022-36394
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-36285 - Uploading Svg Webp And Ico Files Plugin
Authenticated Arbitrary File Upload vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin
PLUGIN
Uploading Svg Webp And Ico Files
CVE-2022-36285
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-36405 - amCharts: Charts and Maps (WordPress plugin)
Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in amCharts: Charts and Maps plugin
PLUGIN
amCharts: Charts and Maps (WordPress plugin)
CVE-2022-36405
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-36341 - As Create Pinterest Pinboard Pages Plugin
Authenticated (subscriber+) plugin settings change leading to Stored Cross-Site Scripting (XSS) vulnerability in Akash soni's AS – Create Pinterest Pinboard Pages plugin
PLUGIN
As Create Pinterest Pinboard Pages
CVE-2022-36341
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-36292 - Gallery Photoblocks Plugin
Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin
PLUGIN
Gallery Photoblocks
CVE-2022-36292
Risk Score
Threat Entry
Updated 2025-03-21
CVE-2022-36288 - Download Manager Plugin
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in W3 Eden Download Manager plugin
PLUGIN
Download Manager
CVE-2022-36288
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-36347 - Alpine Phototile For Pinterest Plugin
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alpine Press Alpine PhotoTile for Pinterest plugin
PLUGIN
Alpine Phototile For Pinterest
CVE-2022-36347
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-36282 - Search Exclude Plugin
Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Roman Pronskiy's Search Exclude plugin
PLUGIN
Search Exclude
CVE-2022-36282
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-36389 - Better Messages Plugin
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin
PLUGIN
Better Messages
CVE-2022-36389
Risk Score
Threat Entry
Updated 2025-02-20
CVE-2022-35726 - Video Gallery Plugin
Broken Authentication vulnerability in yotuwp Video Gallery plugin
PLUGIN
Video Gallery
CVE-2022-35726
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-34868 - Yukassa For Woocommerce Plugin
Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin
PLUGIN
Yukassa For Woocommerce
CVE-2022-34868
Risk Score
Threat Entry
Updated 2025-02-20
CVE-2022-33142 - Better Messages Plugin
Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages plugin
PLUGIN
Better Messages
CVE-2022-33142
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-35242 - THE Leads Management System: 59sec LITE (WordPress plugin)
Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin
PLUGIN
THE Leads Management System: 59sec LITE (WordPress plugin)
CVE-2022-35242
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-29476 - Notification Bar Plugin
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in 8 Degree Themes otification Bar for WordPress plugin
PLUGIN
Notification Bar
CVE-2022-29476
Risk Score
Threat Entry
Updated 2025-03-21
CVE-2022-34658 - Download Manager Plugin
Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin
PLUGIN
Download Manager
CVE-2022-34658
Risk Score
Threat Entry
Updated 2025-02-20
CVE-2022-35235 - Wpide File Manager Code Editor Plugin
Authenticated (admin+) Arbitrary File Read vulnerability in XplodedThemes WPide plugin
PLUGIN
Wpide File Manager Code Editor
CVE-2022-35235
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-34648 - Uploading Svg Webp And Ico Files Plugin
Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in dmitrylitvinov Uploading SVG, WEBP and ICO files plugin
PLUGIN
Uploading Svg Webp And Ico Files
CVE-2022-34648
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-34858 - Oauth 2 0 Client For Sso Plugin
Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin
PLUGIN
Oauth 2 0 Client For Sso
CVE-2022-34858
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-34857 - Sp Project Document Manager Plugin
Reflected Cross-Site Scripting (XSS) vulnerability in smartypants SP Project & Document Manager plugin
PLUGIN
Sp Project Document Manager
CVE-2022-34857
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-36346 - Maxbuttons Plugin
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Max Foundry MaxButtons plugin
PLUGIN
Maxbuttons
CVE-2022-36346
Risk Score