Medium
d45a4b0b-bb98-4c35-a743-c434946002a2
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
969b54d4-50db-4a2f-afa1-e22b29af661e
WordPress Colorbox Lightbox Plugin <= 1.1.4 - Stored Cross-Site Scripting
Medium
8223f9dd-1c2d-40bd-a17d-1bb317829d3b
Sell Photo <= 1.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2020-35935
Advanced Access Manager <= 6.6.1 - Authenticated Authorization Bypass and Privilege Escalation
High
25f782c4-7ece-47cb-9e64-9c93fd8858e9
WordPress fancybox <= 1.0.2 - Stored Cross-Site Scripting
High
CVE-2020-22276
WeForms <= 1.4.7 - CSV injection via form entry
Medium
CVE-2019-6112
Sell Media <= 2.4.1 - Cross-Site Scripting
Medium
CVE-2020-24316
Admin Menu Plugin <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2020-24313
Ultimate Appointment Booking & Scheduling < 1.1.10 - Reflected Cross-Site Scripting
Medium
CVE-2020-17362
Nova Lite < 1.3.9 - Reflected Cross-Site Scripting
Medium
39e3fcf3-95f6-4844-b87a-5540041fe6a8
Very Simple Quiz <= 1.0.0 - Cross-Site Scripting
High
CVE-2020-36730
CMP <= 3.8.1 - Missing Authorization
High
CVE-2020-36838
Facebook Chat Plugin <= 1.5 - Missing Capabilities Check
Critical
CVE-2020-35949
Quiz and Survey Master <= 7.0.0 - Arbitrary File Upload
Medium
b34a82c5-4d70-47d3-9a02-7eeaa13ff677
Ajax Search Pro <= 4.18.7 - Cross-Site Request Forgery to Cross-Site Scripting
High
96608c76-6dfd-4ff8-b114-070ff6706214
Ajax Search Pro <= 4.18.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2020-35933
Newsletter <= 6.8.1 - Reflected Cross-Site Scripting
High
CVE-2020-35945
Elegant Themes (Multiple Versions) - Arbitrary File Upload
High
CVE-2020-35951
Quiz and Survey Master <= 7.0.0 - Unauthenticated Arbitrary File Deletion
High
CVE-2020-36696
Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization
High
CVE-2020-35932
Newsletter <= 6.8.1 - Authenticated PHP Object Injection
Medium
ffe9bfbd-3672-4162-bb1b-675c7eb9e655
Konzept - Fullscreen Portfolio WordPress Theme <= 2.4 - Reflected Cross-Site Scripting
Medium
CVE-2020-36667
JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Change
Medium
CVE-2020-36668
JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.