High
07422361-3c7c-4e3c-bbfb-097c7fe5f2b4
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
27337cf2-18a0-4f26-a674-3ab2003b4838
WooCommerce Anti-Fraud <= 3.2 - Insecure Direct Object Reference
High
CVE-2021-24131
Anti-Spam by CleanTalk < 5.149 - Authenticated SQL Injection
High
CVE-2020-22275
Easy Registration Forms <= 2.0.6 - CSV Injection
High
CVE-2020-22277
Import and export users and customers <= 1.16.3.5 - CSV injection via a customer's profile
Medium
d93006ac-037f-4291-b945-afa38358a037
Contextual Related Posts <= 2.9.3 - Cross-Site Request Forgery
Medium
a80c306e-323b-4ab4-955b-4e264625731c
Fancy Product Designer <= 4.5.0 - Stored Cross-Site Scripting
Medium
8a68d036-9109-4bc0-9451-47fa2f9fa628
Paid Memberships Pro <= 2.5.0 - Cross-Site Scripting
Medium
8a56c38c-93ba-4e22-92b4-72d79ba8cca4
WP Database Error Manager <= 2.1.6 - Reflected Cross-Site Scripting
Critical
CVE-2020-36849
AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2020-27481
Good LMS <= 2.1.4 - Unauthenticated SQL Injection
Critical
CVE-2020-36726
Ultimate Reviews < 2.1.33 - PHP Object Injection
Critical
CVE-2020-36156
Ultimate Member <= 2.1.11 - Authenticated Privilege Escalation via Profile Update
Critical
CVE-2020-36155
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Meta
Critical
CVE-2020-36157
Ultimate Member <= 2.1.11 - Unauthenticated Privilege Escalation via User Roles
Critical
562d0052-7f1a-441b-9ff7-1c8bcb4b74b4
Abandoned Cart Lite for WooCommerce <= 5.8.2 - SQL Injection
High
d0a311b7-5582-4581-bf4e-636d8a936ac6
WooCommerce Blocks <= 3.7.0 - Authorization Bypass
High
CVE-2020-28339
Welcart e-Commerce <= 1.9.35 - PHP Object Injection
Medium
0c6a49d1-633b-47aa-8390-5df3bf8f71a5
WooCommerce <= 4.6.1 & WooCommerce Blocks <= 3.7.0 - Settings Bypass leading to Account Creation
Critical
ea00bcc9-6f9c-4704-8337-074d5356e9e2
WP Activity Log <= 4.1.4 - SQL Injection
Critical
CVE-2020-36718
GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection
High
CVE-2021-24143
AccessPress Social Icons <= 1.8.0 - Author+ SQL Injection
Critical
CVE-2020-36847
Simple File List < 4.2.3 - Remote Code Execution
Medium
b404c6c4-cc05-4040-b96a-7be750020acc
SW Ajax WooCommerce Search <= 1.2.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.