CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- brave ux for-the-badge, forthebadge for the badge +1 moreBrave UX for-the-badge combine-prs.yml os command injection4.6 Medium
- menu item visibility control project item visibility control, unknown menu item visibility control +1 moreMenu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution7.2 High
- amentotech workreapWorkreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR6.5 Medium
- jgwhite33 wp google review sliderWP Google Review Slider < 11.6 - Admin+ Stored XSS4.8 Medium
- trumani stop spammers, unknown stop spammers security | block spam users, comments, forms +1 moreStop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection9.8 Critical
- kwayyinfotech kwayy html sitemapKwayy HTML Sitemap < 4.0 - Admin+ Stored XSS4.8 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL Injection6.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5.1 - Author+ SQL Injection6.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Admin+ SQL Injection6.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL Injection6.5 Medium
- speakdigital bulk delete users by emailBulk Delete Users by Email <= 1.2 - User Deletion via CSRF6.5 Medium
- unknown return refund and exchange for woocommerceReturn Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload9.8 Critical
- unknown simple basic contact formSimple Basic Contact Form < 20221201 - Admin+ Stored XSS4.8 Medium
- eventify project eventify, unknown eventify™ +1 moreEventify <= 2.1 - Admin+ Stored XSS4.8 Medium
- booster elite for woocommerce, for woocommerce, plus for woocommerce +3 more +5 moreBooster for WooCommerce - Reflected Cross-Site Scripting6.1 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL Injection6.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL Injection6.5 Medium
- unknown login for google appsGoogle Apps Login < 3.4.5 - Admin+ Stored XSS4.8 Medium
- unknown iws, iws-geo-form-fields project iws-geo-form-fields +1 moreIWS - Geo Form Fields <= 1.0 - Unauthenticated SQLi9.8 Critical
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5.1 - Unauthenticated SQL Injection7.5 High
- speakdigital bulk delete users by emailBulk Delete Users by Email <= 1.2 - Reflected Cross-Site Scripting6.1 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL Injection6.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery Pro < 19.1.5 - Admin+ SQL Injection4.9 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL Injection6.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL Injection6.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Unauthenticated SQL Injection7.5 High
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL Injection6.5 Medium
- unknown imageinjectImageInject <= 1.17 - Admin+ Stored XSS4.8 Medium
- 10web slider, unknown sliderby10web +1 moreSliderby10Web < 1.2.53 - Admin+ Stored XSS4.8 Medium
- david de boer paytium: mollie payment forms & donations, paytium +1 morePaytium < 4.3.7 - Admin+ Stored XSS4.8 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Admin+ SQL Injection4.9 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Admin+ SQL Injection4.9 Medium
- plugin logic project logic, unknown plugin logic +1 morePlugin Logic < 1.0.8 - Admin+ SQLi7.2 High
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5.1 - Author+ SQL Injection6.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL Injection6.5 Medium
- json-pointer project json-pointerjson-pointer index.js set prototype pollution6.3 Medium
- gnome gvdb, gvariant database +1 moreGNOME gvdb gvdb-builder.c gvdb_table_write_contents_async use after free6.3 Medium
- open-xchange appsuiteOX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks...5.3 Medium
- open-xchange appsuiteOX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large request body...5.3 Medium
- open-xchange appsuiteOX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request...5.3 Medium
- open-xchange appsuiteOX App Suite through 7.10.6 allows XSS via a malicious capability to the metrics or help module,...6.1 Medium
- open-xchange appsuiteOX App Suite through 7.10.6 allows XSS via script code within a contact that has an e-mail...6.1 Medium
- open-xchange appsuiteOX App Suite through 7.10.6 allows XSS via HTML in text/plain e-mail messages.6.1 Medium
- open-xchange appsuiteOX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the...6.1 Medium
- adiscon password manager for iisPassword Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi...6.1 Medium
- open-xchange appsuiteOX App Suite through 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app"...6.1 Medium
- emerson deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware +21 more +23 moreEmerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware...7.8 High
- open-xchange appsuiteOX App Suite through 8.2 allows XSS via a certain complex hierarchy that forces use of Show...5.4 Medium
- open-xchange appsuiteOX App Suite through 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked.5.4 Medium
- devolutions remote desktop managerWeak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows...7.4 High
- Show moreLoading…