Critical
CVE-2020-27481
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2020-36726
Ultimate Reviews < 2.1.33 - PHP Object Injection
Critical
CVE-2020-36156
Ultimate Member <= 2.1.11 - Authenticated Privilege Escalation via Profile Update
Critical
CVE-2020-36155
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Meta
Critical
CVE-2020-36157
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Roles
Critical
562d0052-7f1a-441b-9ff7-1c8bcb4b74b4
Abandoned Cart Lite for WooCommerce <= 5.8.2 - SQL Injection
High
d0a311b7-5582-4581-bf4e-636d8a936ac6
WooCommerce Blocks <= 3.7.0 - Authorization Bypass
High
CVE-2020-28339
Welcart e-Commerce <= 1.9.35 - PHP Object Injection
Medium
0c6a49d1-633b-47aa-8390-5df3bf8f71a5
WooCommerce <= 4.6.1 & WooCommerce Blocks <= 3.7.0 - Settings Bypass leading to Account Creation
Critical
ea00bcc9-6f9c-4704-8337-074d5356e9e2
WP Activity Log <= 4.1.4 - SQL Injection
Critical
CVE-2020-36718
GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection
Critical
CVE-2020-36847
Simple File List < 4.2.3 - Remote Code Execution
Medium
b404c6c4-cc05-4040-b96a-7be750020acc
SW Ajax WooCommerce Search <= 1.2.6 - Reflected Cross-Site Scripting
High
CVE-2020-28035
WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
Medium
CVE-2020-28033
WordPress Core < 5.5.2 - Spam Embed on Multisite Installations
Medium
CVE-2020-28039
WordPress Core < 5.5.2 - Arbitrary File Deletion
Medium
CVE-2020-28037
WordPress Core < 5.5.2 - Misconfiguration That Allows Trigger of New Installation
Medium
CVE-2020-28038
WordPress Core < 5.5.2 - Stored Cross-Site Scripting via post slugs
Medium
CVE-2020-28040
WordPress Core < 5.5.2 - Cross-Site Request Forgery to Theme Image Change
High
CVE-2020-28032
WordPress Core < 5.5.2 - Deserialization Gadget
Medium
4d32eae6-f49f-403b-b295-c72b1486c71c
Greenmart <= 2.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2020-28034
WordPress Core < 5.5.2 - Reflected Cross-Site Scripting via Global Variables
High
CVE-2020-28036
WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
Critical
CVE-2021-29476
WordPress Core < 5.5.3 - PHP Object Injection Gadget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.