Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

unknown — Vulnerabilities & Security Advisories 4139

Browse all 4139 CVE security advisories affecting unknown. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by unknown:Contest GalleryDownload ManagerTutor LMS – eLearning and online course solutionEventONModern Events Calendar Litewp-eMemberAI ChatBotElementor Website BuilderNinja Forms Contact Form – The Drag and Drop Form Builder for WordPressWelcart e-CommerceLogo SliderForm Maker by 10WebBooster for WooCommerceYi Technologywp-cart-for-digital-productswp-affiliate-platformPhoto Gallery by 10WebMapPress Maps for WordPressEventPrimePopup boxWPQA BuilderWP MultiTaskingPhoto Gallery by 10Web – Mobile-Friendly Image GallerySalon booking systemSimple Download MonitorAutoptimizeVikBooking Hotel Booking Engine & PMSLearnPressNewsletter PopupNinja Forms
CVE IDTitleCVSSSeverityPublished
CVE-2022-3911 iubenda < 3.3.3 - Subscriber+ Privileges Escalation to Admin — iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more 8.8 -2023-01-02
CVE-2022-4256 All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS — All-in-One Addons for Elementor 4.8 -2023-01-02
CVE-2022-4352 Qe SEO Handyman <= 1.0 - Admin+ SQLi — Qe SEO Handyman 7.2 -2023-01-02
CVE-2022-4200 Login with Cognito <= 1.4.8 - Admin+ Stored XSS — Login with Cognito 4.8 -2023-01-02
CVE-2022-4099 Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi — Joy Of Text Lite 9.8 -2023-01-02
CVE-2022-4369 WP-Lister Lite for Amazon < 2.4.4 - Reflected XSS — WP-Lister Lite for Amazon 6.1 -2023-01-02
CVE-2022-4298 Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download — Wholesale Market 7.5 -2023-01-02
CVE-2022-4109 Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download — Wholesale Market for WooCommerce 4.9 -2023-01-02
CVE-2022-4236 Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access — Welcart e-Commerce 6.5 -2023-01-02
CVE-2022-4324 Custom Field Template < 2.5.8 - Admin+ PHP Object Injection — Custom Field Template 7.2 -2023-01-02
CVE-2022-4373 Quote-O-Matic <= 1.0.5 - Admin+ SQLi — Quote-O-Matic 7.2 -2023-01-02
CVE-2022-4114 Superio - Job Board < 1.2.33 - Subscriber+ Stored Cross-Site Scripting — Superio 5.4 -2023-01-02
CVE-2022-4417 WP Cerber < 9.3.3 - User Enumeration Bypass via Rest API — WP Cerber Security, Anti-spam & Malware Scan 4.3 -2023-01-02
CVE-2022-4381 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form — Popup Maker 5.4 -2023-01-02
CVE-2022-4362 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Shortcode — Popup Maker 5.4 -2023-01-02
CVE-2022-4358 WP RSS By Publishers <= 0.1 - Admin+ SQLi — WP RSS By Publishers 7.2 -2023-01-02
CVE-2022-4359 WP RSS By Publishers <= 0.1 - Admin+ SQLi — WP RSS By Publishers 7.2 -2023-01-02
CVE-2022-3936 Team Members < 5.2.1 - Editor+ Stored XSS — Team Members 4.8 -2023-01-02
CVE-2022-4119 Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS — Image Optimizer, Resizer and CDN 4.8 -2023-01-02
CVE-2022-3994 Authenticator < 1.3.1 - Subscriber+ Denial of Service via Feed Token Disclosure — Authenticator 6.5 -2023-01-02
CVE-2022-4355 LetsRecover < 1.2.0 - Admin+ SQLi — LetsRecover 7.2 -2023-01-02
CVE-2022-4302 White Label CMS < 2.5 - Admin+ PHP Object Injection — White Label CMS 7.2 -2023-01-02
CVE-2022-4142 WordPress Filter Gallery Plugin < 0.1.6 - Admin+ Stored XSS — WordPress Filter Gallery Plugin 4.8 -2023-01-02
CVE-2022-4356 LetsRecover < 1.2.0 - Admin+ SQLi — LetsRecover 7.2 -2023-01-02
CVE-2022-4340 BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id — BookingPress 5.3 -2023-01-02
CVE-2022-4049 WP User <= 7.0 - Unauthenticated SQLi — WP User 9.8 -2023-01-02
CVE-2022-4198 WP Social Sharing <= 2.2 - Admin+ Stored XSS — WP Social Sharing 4.8 -2023-01-02
CVE-2022-4360 WP RSS By Publishers <= 0.1 - Admin+ SQLi — WP RSS By Publishers 7.2 -2023-01-02
CVE-2022-4140 Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access — Welcart e-Commerce 7.5 -2023-01-02
CVE-2022-3241 Build App Online < 1.0.19 - Unauthenticated SQL Injection — Build App Online 9.8 -2023-01-02

This page lists every published CVE security advisory associated with unknown. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.