Medium
CVE-2020-36841
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2020-12073
Responsive Ready Sites Importer <= 2.2.6 - Unprotected AJAX Actions
High
CVE-2020-9372
Appointment Booking Calendar <= 1.3.34 - CSV Injection
Medium
CVE-2020-9371
Appointment Booking Calendar <= 1.3.34 - Stored Cross-Site Scripting
High
9cd2ca03-e644-4bcd-b4b1-a547494fed7d
Booked <= 2.2.5 - Missing Authorization on AJAX Actions
High
Exploited in attacks
CVE-2020-11738
Duplicator < 1.3.28 - Directory Traversal
Medium
CVE-2020-36854
Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2020-9459
Modern Events Calendar Lite <= 5.1.6 - Missing Authorization to Stored Cross-Site Scripting and Settings Update
High
CVE-2020-36853
10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change
High
CVE-2020-36731
Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update
Medium
CVE-2020-9019
WPJobBoard <= 5.5.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2020-20406
Elementor Website Builder <= 2.9.2 - Stored Cross-Site Scripting
Medium
CVE-2020-9334
Envira Photo Gallery <= 1.7.6 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-9392
Pricing Table by Supsystic <= 1.8.1 - Missing Authorization on AJAX Actions
High
CVE-2020-9393
Pricing Table by Supsystic <= 1.8.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2019-19134
Hero Maps Premium <= 2.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2020-9335
Photo Gallery by 10Web <= 1.5.45 - Multiple Cross-Site Scripting Issues
High
CVE-2020-9394
Pricing Table by Supsystic <= 1.8.1 - Cross-Site Request Forgery to Cross-Site Scripting and Setting Changes
High
af2d004f-fa9e-4e26-a1e3-03fb31cb95c4
Ultimate Membership Pro <= 8.6.1 - Cross-Site Request Forgery
High
9ecaaa86-9de1-4b90-b6cf-885621cffb19
Ultimate Membership Pro <= 8.6 - Cross-Site Request Forgery
High
CVE-2020-8819
CardGate Payments for WooCommerce <= 3.1.15 - Lack of Origin Validation
Medium
b3bae191-9395-481c-93bf-b17cf5f87271
Chained Quiz <= 1.1.9 -Stored Cross-Site Scripting
Medium
23f1b1da-2ac0-49c1-bb32-2fe2cfd56192
Real Testimonials <= 2.1.6 - Authenticated Stored Cross-Site Scripting
Medium
6aae5b1d-9b84-4628-b0b6-7b39054e08a0
Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.