Critical
CVE-2020-26511
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2020-36721
Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation
Critical
CVE-2020-36708
Epsilon Framework Themes (Various Versions) - Function Injection
Medium
37f47ce1-0657-414d-a491-99f2722a44f5
BA Book Everything Plugin < 1.3.25 - Cross-Site Scripting and Cross-Frame Scripting
High
CVE-2021-24132
Slider by 10Web <= 1.2.35 - SQL Injection
High
CVE-2020-26876
WP Courses <= 2.0.28 - Improper Access Controls
Medium
CVE-2020-36760
Ocean Extra <=1.6.5 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36755
Customizr <= 4.3.0 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36753
Hueman <= 3.6.3 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36736
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36735
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass
Critical
CVE-2020-36706
Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload
High
CVE-2020-36174
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Cross-Site Request Forgery to Plugin Installation
Critical
CVE-2015-9324
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.3.2 - SQL Injection
Medium
CVE-2015-9360
UpdraftPlus <= 1.9.63 and UpdraftPlus (paid) <= 2.9.63 - Cross-Site Scripting
Medium
CVE-2020-36175
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27 - Validation Bypass via Email Field
Critical
CVE-2019-13571
Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection
High
08e9e7f4-0f25-4bc1-85b7-4b504ed38582
Coditor <= 1.1 - Remote Code Execution
Medium
CVE-2020-36510
15Zine | Magazine Newspaper Blog News WordPress Theme < 3.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2020-36173
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 3.4.27.1 - Stored Cross-Site Scripting
High
CVE-2020-35939
Team Showcase <= 1.22.15 - Object Injection
Medium
ac3a7732-c076-4418-b44a-748cc5668107
Discount Rules for WooCommerce <= 2.2.0 - Missing Authorization
High
CVE-2020-35936
Team Showcase <= 1.22.15 - Stored Cross-Site Scripting
High
CVE-2020-35937
Team Showcase <= 1.22.15 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.