High
2fd0073c-3f75-4783-838d-d01fdea008c1
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
e6d1ad58-894c-40ed-968e-9ce64eebba55
Advanced Booking Calendar <= 1.6.1 - Unauthenticated SQL Injection
Medium
CVE-2020-27344
CM Download Manager <= 2.7.0 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-5651
Simple Download Monitor <= 3.8.8 - SQL Injection
Critical
CVE-2020-27615
Loginizer <= 1.6.3 - SQL Injection
Medium
CVE-2020-5650
Simple Download Monitor <= 3.8.8 - Unauthenticated Stored Cross-Site Scripting
High
23f0315f-5523-4e16-8adf-f9fe9254032a
Super Store Finder <= 6.1, Super Interactive Maps <= 1.9, Super Logo Showcase <= 2.2 - Arbitrary File Upload
Medium
CVE-2020-27356
Debug Meta Data <= 1.1.2 - Stored Cross-Site Scripting
Medium
CVE-2020-28707
Stockdio Historical Chart < 2.8.1 - Reflected Cross-Site Scripting
High
CVE-2020-36725
TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update
Medium
3a11216c-868c-4dd9-b6d5-2a772d7d303e
Comment Press <= 2.7.1 - Cross-Frame Scripting
Critical
0ee4fe34-e6ae-4f37-a1a7-ebb153ae7a67
Realia <= 1.4.0 - Arbitrary Post Deletion
High
f3584b5b-ff93-4a47-b6e6-f95335ee88b6
Mailster <= 2.4.5.1 - Stored Cross-Site Scripting
High
CVE-2020-28649
Child Theme Creator by Orbisius <= 1.5.1 - Cross-Site Request Forgery to Arbitrary File Modification and Creation
High
CVE-2021-38345
Brizy Page Builder <= 2.3.11 - Incorrect Authorization Checks Allowing Post Modification
High
2f3328c2-290f-410b-a6c8-2825d415f511
Web Instant Messenger <= 1.1.2 and LocalWeb In One <= 1.6.4 - Stored Cross-Site Scripting
High
CVE-2021-24123
PowerPress <= 8.3.7 - Arbitrary File Upload
High
CVE-2021-24377
Autoptimize <= 2.7.7 - Race Condition leading to Remote Code Execution
Medium
CVE-2021-24378
Autoptimize <= 2.7.7 - Unsafe File Upload to Cross-Site Scripting
Critical
CVE-2021-24376
Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import Settings
High
e3a8f554-7cb6-40b7-b83c-819e7785058a
HyperComments <= 1.2.2 - Arbitrary File Deletion
Medium
CVE-2020-28650
WPBakery Page Builder for WordPress <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2020-26596
Elementor Pro <= 3.0.5 - Authenticated Remote Code Execution in Dynamic OOO Widget
High
9f9e5212-caed-46db-bbf2-81c4df88439f
LearnPress – WordPress LMS Plugin <= 3.2.7.2 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.