Medium
CVE-2018-13832
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2018-20981
Ninja Forms <= 3.3.8 - Insufficient Restrictions during Export Personal Data requests
High
CVE-2018-12895
WordPress Core < 4.9.7 - Authenticated Arbitrary File Deletion
Medium
CVE-2018-13136
Ultimate Member <= 2.0.17 - Authenticated Cross-Site Scripting
Medium
CVE-2018-0642
FV Flowplayer Video Player 6.1.2 - 6.6.4 - Cross-Site Scripting
Medium
CVE-2018-11105
3CX Live Chat <= 8.0.07 - Cross-Site Scripting
Medium
9242cebe-3394-4df9-9c60-8d8d6297d791
Open Graph and Twitter Card Tags <= 2.2.4.1 - Unauthenticated Cross-Site Scripting
High
CVE-2018-21002
JS Help Desk – Best Help Desk & Support Plugin <= 2.0.5 - Cross-Site Request Forgery
High
CVE-2018-12636
iThemes Security <= 7.0.2 - Authenticated SQL Injection
Medium
CVE-2018-11526
WordPress Comments Import & Export <= 2.0.4 - CSV Injection
High
c48091fc-c11d-4753-9763-e1face3723fe
PublishPress Capabilities <= 1.5.8 - Authenticated SQL Injection
Medium
CVE-2018-1000505
Tooltipy < 5.1 - Cross-Site Request Forgery
High
CVE-2018-11525
Advanced Order Export For WooCommerce <= 1.5.4 - CSV Injection
Medium
19f3d3a4-1742-4e3f-97c5-acf960c3cdb5
Ultimate Form Builder Lite <= 1.3.7 - Cross-Site Scripting
Critical
CVE-2018-10969
Pie Register <= 3.0.9 - SQL Injection
High
CVE-2019-1010104
Quick Chat <= 4.14 - SQL Injection
Medium
CVE-2018-1000512
Tooltipy (tooltips for WP) <= 5.0 - Reflected Cross-Site Scripting
High
CVE-2018-10363
Booking calendar, Appointment Booking System < 2.2.3 - Unauthenticated Parameter Manipulation
High
CVE-2018-11580
Mass Pages/Posts Creator <= 1.2.2 - Missing Authorization
Medium
CVE-2018-11633
Digital Goods < 2.2 - Cross-Site Request Forgery
Medium
CVE-2018-11709
wpForo Forum < 1.4.12 - Reflected Cross-Site Scripting
Medium
CVE-2018-11485
Advance Search for WooCommerce < 1.1 - Cross-Site Scripting
Medium
CVE-2018-11632
Add Social Share Buttons for Whatsapp and Viber < 1.1 - Cross-Site Request Forgery
Medium
CVE-2018-11486
Advance Search for WooCommerce <= 1.0.9 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.