High
CVE-2020-36848
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2020-35590
Limit Login Attempts Reloaded <= 2.17.3 - Login Rate Limiting Bypass
Medium
CVE-2020-29304
DirectoriesPro by SabaiApps <= 1.3.45 - Reflected Cross-Site Scripting
Medium
CVE-2020-36384
Page Builder: Pagelayer – Drag and Drop website builder < 1.3.5 - Reflected Cross-Site Scripting via Color Settings
Medium
CVE-2020-29303
DirectoriesPro Plugin by SabaiApps <= 1.3.45 - Cross-Site Scripting via _drts_form_build_id, _t_ Parameters
Medium
CVE-2020-36383
Page Builder: Pagelayer – Drag and Drop website builder < 1.3.5 - Reflected Cross-Site Scripting via font-size
Medium
CVE-2020-14205
DiveBook <= 1.1.4 - Improper Access Control
Medium
CVE-2020-36170
Ultimate Member <= 2.1.12 - Cross-Site Scripting
Critical
CVE-2020-29047
WP Hotel Booking <= 1.10.3 - Remote Code Execution
High
CVE-2020-35234
Easy WP SMTP <= 1.4.2 - Sensitive Information Disclosure
Medium
CVE-2021-24129
Themify Portfolio Post <= 1.1.5 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-28976
Canto <= 1.9.0 - Blind Server-Side Request Forgery via detail.php
High
502724d9-ccc4-42db-bc1e-c521f7c80e70
Profile Builder/Profile Builder Pro <= 3.3.2 - Authenticated Blind SQL Injection
Medium
9d3b6448-14cc-4146-9a93-98150031fcb6
Wibar | Wine and Vineyard WooCommerce WordPress Theme < 1.2.1 - Cross-Site Scripting
High
CVE-2020-24063
Canto <= 1.9.0 - Blind Server-Side Request Forgery via download.php
Medium
CVE-2020-29395
EventON <= 3.0.5 - Reflected Cross-Site Scripting
Medium
4bd169bc-1538-400f-b2cd-0bbcf1fea7ee
BuddyPress <= 6.3.0 - Insufficient Input Validation
Medium
CVE-2020-36670
NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions
Critical
bec7d613-b1cd-4a4e-bbd9-62bca3a864a2
WPJobBoard <= 5.6.4 - SQL Injection
High
CVE-2021-24130
WP Google Map Plugin <= 4.1.4 - Authenticated SQL Injection via Orderby
Medium
414013e9-5baa-4f4f-bf67-f0e821ece807
WPJobBoard <= 5.6.4 - Reflected Cross-Site Scripting & Cross-Frame Scripting
Medium
CVE-2020-36171
Elementor Website Builder <= 3.0.13 - Unrestricted SVG Uploads
Critical
CVE-2021-24158
Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated Privilege Escalation
High
CVE-2020-35235
Secure File Manager < 2.8.2 - Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.