High
CVE-2019-15840
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
edd1396b-02f6-4292-82df-76c5eeecfe20
Facebook Chat Plugin <= 1.2 - Cross-Site Request Forgery to Site Settings Changes
Medium
cad5274f-0d73-425d-bdfb-478c77d55d6c
WordPress Download Manager <= 2.9.96 - Cross-Site Scripting
High
CVE-2019-10270
Ultimate Member <= 2.0.39 - Privilege Escalation
High
dae2d028-6976-468a-9e93-ec712887d657
LionScripts: IP Blocker Lite <= 10.4 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2019-10271
Ultimate Member <= 2.0.39 - Unauthorized Profile Modification
Medium
fc06ba09-9562-4d97-90ff-5464399feced
Real Estate Manager – Property Listing and Agent Management <= 6.8 - Cross-Site Scripting
High
CVE-2019-15660
WP-Members <= 3.2.7 - Cross-Site Request Forgery
High
CVE-2019-5974
Contest Gallery – Photo Contest Plugin for WordPress <= 10.4.4 - Cross-Site Request Forgery
Medium
CVE-2019-15116
Easy Digital Downloads – Simple eCommerce for Selling Digital Files <= 2.9.15 - Stored Cross-Site Scripting
High
CVE-2019-15649
Insert or Embed Articulate Content into WordPress < 4.2999 - Arbitrary File Upload
Medium
2d90737b-fc4b-45a3-b970-64468e9eb431
Support Board <= 1.2.8 - Authenticated Stored Cross-Site Scripting
Critical
3d5dfccd-74ab-4de9-8ea6-58908865086d
Revamp CRM for WooCommerce < 1.0.4 - Local File Inclusion
High
CVE-2019-15865
Breadcrumbs by menu <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2019-15864
Breadcrumbs by menu < 1.0.3 - Cross-Site Scripting
High
CVE-2019-15863
ConvertPlus <= 3.4.4 - Unauthorized Account Creation
High
CVE-2019-15866
Crelly Slider <= 1.3.4 - Arbitrary File Upload
Medium
f10f6b12-5bf0-475a-ad9e-084ce5801b84
WP Google Maps <= 7.11.27 - Cross-Site Request Forgery
High
78bb5e18-5535-4cee-a38b-e38802059ef7
Paid Memberships Pro <= 2.0.5 - Open Redirect
High
CVE-2019-15644
Zoho SalesIQ <= 1.0.8 - Stored Cross-Site Scripting
Medium
CVE-2019-12566
WP Statistics <= 12.6.5 - Stored Cross-Site Scripting
High
CVE-2019-15645
Zoho SalesIQ <= 1.0.8 - Cross-Site Request Forgery
Critical
CVE-2019-12498
WP Live Chat Support <= 8.0.32 - Unprotected Functions
High
603b1f0e-185c-4a0a-a6a2-c63105b2c9f3
Finale WooCommerce Sale Countdown <= 2.9.0 - Authenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.