Medium
CVE-2018-20853
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
cdbf2658-b819-4fd3-ac89-8b90a7e3a2cf
Social Share, Social Login and Social Comments <= 7.10.6 - Authentication Bypass
High
CVE-2018-7204
Bit File Manager <= 5.0.0 - Information Disclosure
Critical
61e6db2f-5dfd-44ef-9500-9f0cb5cd67ba
WP Job Manager <= 1.29.2 - PHP Object Injection
High
CVE-2018-20980
Ninja Forms Contact Form <= 3.2.14 - Parameter Tampering
Critical
CVE-2018-1000131
WP Support Plus Responsive Ticket System <= 9.0.2 - SQL Injection
High
fe7e6a53-36c3-41fc-bae8-a9e1de2494ad
Category Order and Taxonomy Terms Order <= 1.5.2.2 - Authenticated PHP Object Injection
Medium
CVE-2018-7280
Ninja Forms Contact Form <= 3.2.13 - Cross-Site Scripting
High
f83f878d-b708-4677-929a-e1ced535d99f
MainWP Child < 3.4.5 - Authentication Bypass
Medium
CVE-2018-6944
Ultimate Member <= 2.0 - Cross-Site Scripting
Medium
CVE-2018-1000172
NextGEN Gallery <= 2.2.44 - Cross-Site Scripting via image alt and title text
Medium
CVE-2018-6943
Ultimate Member <= 2.0.3 - Cross-Site Scripting
Medium
CVE-2018-6465
PropertyHive < 1.4.15 - Cross-Site Scripting
High
CVE-2018-6195
Splashing Images <= 2.1 - PHP Object Injection
High
CVE-2018-6015
Email Subscribers & Newsletters <= 3.4.7 - Unauthenticated Subscriber Download
Medium
CVE-2018-5657
Coming Soon <= 1.1.18 - Stored Cross-Site Scripting
Medium
CVE-2018-20983
Perfect Images <= 5.2.2 - Cross-Site Scripting
Medium
CVE-2018-5660
Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via coming-soon_sub_title parameter
Medium
CVE-2018-5665
Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via logo_height parameter
Medium
CVE-2018-5666
Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via bg_color parameter
Medium
CVE-2018-5661
Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via logo_width parameter
Medium
CVE-2018-5662
Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via counter_title parameter
High
CVE-2018-5658
Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Request Forgery
Medium
CVE-2018-5659
Coming Soon < 1.1.19 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.