Medium
bc91449a-7013-430d-bf7c-70175ea45114
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
a0297cab-8b6f-4e09-b552-4772c6f72c04
Elementor Addon Elements <= 1.6.3 - Reflected Cross-Site Scripting
Medium
765df8f4-438c-41b6-ac74-494f1b74cf33
Cookiebot | GDPR/CCPA Compliant Cookie Consent and Control <= 3.6.0 - Reflected Cross-Site Scripting
Medium
4625d217-99d4-47d8-b093-fe55a3018348
Sticky Menu & Sticky Header <= 2.20 - Reflected Cross-Site Scripting
Medium
1f092dae-e298-42e3-b494-fc7b7669b300
All In One WP Security & Firewall <= 4.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24133
ActiveCampaign < 8.0.2 - Cross-Site Request Forgery
High
CVE-2021-24141
Advanced Database Cleaner <= 3.0.1 - SQL injection
Medium
CVE-2020-36750
EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypass
Medium
CVE-2021-24134
Constant Contact Forms <= 1.8.7 Editor+ Stored Cross-Site Scripting
Medium
CVE-2020-36831
NextScripts: Social Networks Auto-Poster <= 4.3.17 - Missing Authorization
Critical
a96c9047-9dea-4bc7-8982-8983930f7cfa
Augmented reality plugin <= 1.2.0 - Arbitrary File Upload
Critical
Exploited in attacks
CVE-2020-25213
File Manager <= 6.8 - Arbitrary File Upload/Remote Code Execution
Medium
f21100f4-f655-41e6-a31c-70ce4dfb1ba6
Ceceppa Multilingua <= 1.5.17 - Reflected Cross-Site Scripting
Medium
CVE-2020-25033
Subscribe Sidebar plugin by Blubrry <= 1.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2020-24699
Chamber Dashboard Business Directory < 3.3.1 - Cross-Site Scripting
High
CVE-2020-25379
Recall Products <= 0.8 - Authenticated SQL Injection
Medium
CVE-2020-25375
WP smart CRM & Invoices FREE <= 1.8.7 - Stored Cross-Site Scripting
Medium
CVE-2020-25380
Recall Products <= 0.8 - Cross-Site Scripting
Medium
e52914cc-da0c-4b79-b378-4ef63e7974bb
Real Estate 7 WordPress < 3.0.6 - Reflected Cross-Site Scripting
Critical
26140315-04c7-4056-a570-865cd4ffe85e
Quiz and Survey Master <= 7.0.1 - Arbitrary File Upload
Medium
f5292c55-6445-4aec-b06e-6e625794d842
Slider, Gallery, and Carousel by MetaSlider <= 3.17.1 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-24315
WordPress Poll <= 36 - SQL Injection
Medium
CVE-2020-25378
WP Floating Menu <= 1.4.0 - Cross-Site Scripting via id Parameter
High
CVE-2020-24948
Autoptimize <= 2.7.6 - Authenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.