High
CVE-2020-35234
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2021-24129
Themify Portfolio Post <= 1.1.5 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-28976
Canto <= 1.9.0 - Blind Server-Side Request Forgery via detail.php
High
502724d9-ccc4-42db-bc1e-c521f7c80e70
Profile Builder/Profile Builder Pro <= 3.3.2 - Authenticated Blind SQL Injection
Medium
9d3b6448-14cc-4146-9a93-98150031fcb6
Wibar | Wine and Vineyard WooCommerce WordPress Theme < 1.2.1 - Cross-Site Scripting
High
CVE-2020-24063
Canto <= 1.9.0 - Blind Server-Side Request Forgery via download.php
Medium
CVE-2020-29395
EventON <= 3.0.5 - Reflected Cross-Site Scripting
Medium
4bd169bc-1538-400f-b2cd-0bbcf1fea7ee
BuddyPress <= 6.3.0 - Insufficient Input Validation
Medium
CVE-2020-36670
NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions
Critical
bec7d613-b1cd-4a4e-bbd9-62bca3a864a2
WPJobBoard <= 5.6.4 - SQL Injection
High
CVE-2021-24130
WP Google Map Plugin <= 4.1.4 - Authenticated SQL Injection via Orderby
Medium
414013e9-5baa-4f4f-bf67-f0e821ece807
WPJobBoard <= 5.6.4 - Reflected Cross-Site Scripting & Cross-Frame Scripting
Medium
CVE-2020-36171
Elementor Website Builder <= 3.0.13 - Unrestricted SVG Uploads
High
CVE-2020-35235
Secure File Manager < 2.8.2 - Remote Code Execution
High
07422361-3c7c-4e3c-bbfb-097c7fe5f2b4
Gutenberg Template and Pattern Library & Redux Framework <= 4.1.20 - Cross-Site Request Forgery
Medium
27337cf2-18a0-4f26-a674-3ab2003b4838
WooCommerce Anti-Fraud <= 3.2 - Insecure Direct Object Reference
High
CVE-2021-24131
Anti-Spam by CleanTalk < 5.149 - Authenticated SQL Injection
High
CVE-2020-22275
Easy Registration Forms <= 2.0.6 - CSV Injection
High
CVE-2020-22277
Import and export users and customers <= 1.16.3.5 - CSV injection via a customer's profile
Medium
d93006ac-037f-4291-b945-afa38358a037
Contextual Related Posts <= 2.9.3 - Cross-Site Request Forgery
Medium
a80c306e-323b-4ab4-955b-4e264625731c
Fancy Product Designer <= 4.5.0 - Stored Cross-Site Scripting
Medium
8a68d036-9109-4bc0-9451-47fa2f9fa628
Paid Memberships Pro <= 2.5.0 - Cross-Site Scripting
Medium
8a56c38c-93ba-4e22-92b4-72d79ba8cca4
WP Database Error Manager <= 2.1.6 - Reflected Cross-Site Scripting
Critical
CVE-2020-36849
AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.