High
06bc7a24-eafc-4b06-852e-9b596f107805
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2020-5579
Paid Memberships Pro < 2.3.3 - Authenticated SQL Injection
High
ab520bcb-5739-4b99-ad93-73416ab39084
WP Frontend Profile <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2020-36722
Visual Composer <= 26.0 - Multiple Cross-Site Scripting
High
CVE-2021-24140
Ajax Load More plugin < 5.3.2 - SQL Injection
Medium
CVE-2020-12832
Simple File List <= 4.2.7 - Arbitrary File Deletion
Medium
CVE-2021-24128
Team Members <= 5.0.3 - Authenticated Cross-Site Scripting
Critical
CVE-2021-24139
Photo Gallery by 10Web <= 1.5.54 - SQL Injection via bwg_search_x Parameter
High
CVE-2020-36715
Login/Signup Popup < 1.5 - Missing Authorization
High
1c09743a-cf0a-4eaa-8508-ecde32de4fce
WP Product Review Lite <= 3.7.5 - Unauthenticated Stored Cross Site Scripting
Medium
CVE-2020-14959
Easy Testimonials <= 3.5.2 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-12742
iubenda < 2.3.5 - Failure to Restrict URL Protocol
Medium
498c0080-ae5e-492b-b75f-6ce3227f3ca0
Paytium <= 3.1.1 - Stored Cross-Site Scripting
Medium
CVE-2021-24888
ImageBoss – Images Up To 60% Smaller & CDN < 3.0.6 - Cross-Site Scripting
High
CVE-2020-13643
Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Critical
CVE-2020-11530
Chop Slider 3 <= 3.4 - Unauthenticated SQL Injection
Medium
CVE-2020-12696
iframe <= 4.4 - Authenticated Stored Cross Site Scripting
High
CVE-2020-13125
Ultimate Addons for Elementor <= 1.24.1 - Registration Bypass
Critical
CVE-2020-13126
Elementor Pro <= 2.9.3 - Authenticated (Subscriber+) Arbitrary File Upload
High
c232b39c-7144-4d3a-9770-883986ca8b29
WooCommerce <= 4.0.4 - Unauthorized Post Meta Creation/Modification
High
CVE-2020-13642
Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2019-19110
wpForo Forum <= 1.6.5 - Cross-Site Scripting via s parameter
Medium
CVE-2019-19112
wpForo Forum <= 1.6.5 - Cross-Site Scripting via wpf-dw-td-value class
High
42b24b41-c520-4bb8-ba56-6f35500ee90e
FooGallery <= 1.9.24 - Authenticated Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.