Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Unknown — Vulnerabilities & Security Advisories 4139

Browse all 4139 CVE security advisories affecting Unknown. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by Unknown:Contest GalleryDownload ManagerTutor LMS – eLearning and online course solutionEventONModern Events Calendar Litewp-eMemberAI ChatBotElementor Website BuilderNinja Forms Contact Form – The Drag and Drop Form Builder for WordPressWelcart e-CommerceLogo SliderForm Maker by 10WebBooster for WooCommerceYi Technologywp-cart-for-digital-productswp-affiliate-platformPhoto Gallery by 10WebMapPress Maps for WordPressEventPrimePopup boxWPQA BuilderWP MultiTaskingPhoto Gallery by 10Web – Mobile-Friendly Image GallerySalon booking systemSimple Download MonitorAutoptimizeVikBooking Hotel Booking Engine & PMSLearnPressNewsletter PopupNinja Forms
CVE IDTitleCVSSSeverityPublished
CVE-2022-4306 Panda Pods Repeater Field < 1.5.4 - Reflected XSS — Panda Pods Repeater Field 5.4 -2023-01-30
CVE-2022-4776 CC Child Pages < 1.43 - Contributor+ Stored XSS via Shortcode — CC Child Pages 5.4 -2023-01-30
CVE-2022-0316 Multiple themes - Unauthenticated Arbitrary File Upload — WeStand 9.8 -2023-01-23
CVE-2022-4775 GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode — GeoDirectory 5.4 -2023-01-23
CVE-2022-4718 Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode — Landing Page Builder 5.4 -2023-01-23
CVE-2021-24837 Passster < 3.5.5.8 - Contributor+ Stored Cross-Site Scripting — Passster 5.4 -2023-01-23
CVE-2022-4542 Compact WP Audio Player < 1.9.8 - Contributor+ Stored XSS — Compact WP Audio Player 5.4 -2023-01-23
CVE-2022-4485 Page-list < 5.3 - Contributor+ Stored XSS — Page-list 5.4 -2023-01-23
CVE-2022-4305 Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin — Login as User or Customer 9.8 -2023-01-23
CVE-2022-4650 HashBar – WordPress Notification Bar < 1.3.6 - Contributor+ Stored XSS via Shortcode — HashBar 5.4 -2023-01-23
CVE-2022-4715 Structured Content < 1.5.1 - Contributor+ Stored XSS in Shortcode — Structured Content (JSON-LD) #wpsc 5.4 -2023-01-23
CVE-2022-4017 Booster for WooCommerce - Multiple CSRF — Booster for WooCommerce 8.8 -2023-01-23
CVE-2022-4693 User Verification < 1.0.94 - Authentication Bypass — User Verification 9.8 -2023-01-23
CVE-2022-4758 10WebMapBuilder < 1.0.72 - Contributor+ Stored XSS via Shortcode — 10WebMapBuilder 5.4 -2023-01-23
CVE-2022-4467 Search & Filter < 1.2.16 - Contributor+ Stored XSS — Search & Filter 5.4 -2023-01-23
CVE-2022-4627 ShiftNav – Responsive Mobile Menu < 1.7.2 - Contributor+ Stored XSS in Shortcode — ShiftNav 5.4 -2023-01-23
CVE-2022-4303 WP Limit Login Attempts <= 2.6.4 - IP Spoofing — WP Limit Login Attempts 7.5 -2023-01-23
CVE-2022-4790 WP Google My Business Auto Publish < 3.4 - Contributor+ Stored XSS via Shortcode — WP Google My Business Auto Publish 5.4 -2023-01-23
CVE-2022-4753 Print-O-Matic < 2.1.8 - Contributor+ Stored XSS via Shortcode — Print-O-Matic 5.4 -2023-01-23
CVE-2022-4323 Google Analyticator < 6.5.6 - Admin+ PHP Object Injection — Analyticator 7.2 -2023-01-23
CVE-2022-4548 Optimize images ALT Text (alt tag) & names for SEO using AI < 2.0.8 - Settings Update via CSRF — Optimize images ALT Text (alt tag) & names for SEO using AI 6.5 -2023-01-23
CVE-2022-4509 Content Control < 1.1.10 - Contributor+ Stored XSS — Content Control 5.4 -2023-01-23
CVE-2022-3425 Google Analyticator < 6.5.6 - Admin+ PHP Object Injection — Analyticator 7.2 -2023-01-23
CVE-2022-4230 WP Statistics < 13.2.9 - Authenticated SQLi — WP Statistics 8.8 -2023-01-23
CVE-2022-4545 Sitemap < 4.4 - Contributor+ Stored XSS — Sitemap 5.4 -2023-01-23
CVE-2022-4706 Genesis Columns Advanced < 2.0.4 - Contributor+ Stored XSS via Shortcode — Genesis Columns Advanced 5.4 -2023-01-23
CVE-2022-4383 CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi — CBX Petition for WordPress 9.8 -2023-01-23
CVE-2022-4751 Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode — Word Balloon 5.4 -2023-01-23
CVE-2022-3811 EU Cookie Law <= 3.1.6 - Admin+ Stored XSS — EU Cookie Law for GDPR/CCPA 4.8 -2023-01-23
CVE-2022-4474 Easy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.4.0 - Contributor+ Stored XSS — Easy Social Feed 5.4 -2023-01-23

This page lists every published CVE security advisory associated with Unknown. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.