Medium
da15614b-6619-4ccb-93eb-12923910fb41
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2020-12480
CSRF in Play Framework
Critical
CVE-2020-35950
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.152 - Cross-Site Request Forgery
High
CVE-2020-35948
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin 4.2.1 - 4.2.12 - Unprotected AJAX Actions
Medium
0512e478-210f-42a9-86ea-a892cd6cfcd1
Internal Links Manager <= 2.1.0 - Multiple Stored Cross-Site Scripting
Critical
CVE-2020-15152
Server-Side Request Forgery in ftp-srv
Medium
fd3d9ce8-0ebf-490e-8c3a-73883638c3eb
NextGEN Gallery Sell Photo <= 1.0.4 - Stored Cross-Site Scripting
Medium
9ddc2f44-e53f-45c2-b293-ad4abc8cff8f
Geo Magazine Theme <= 2.0 - Reflected Cross-Site Scripting
Medium
7def307b-5788-4cb4-82a4-517c5c9fe500
Easy Media Download <= 1.1.4 - Stored Cross-Site Scripting
High
9d1e8703-4ad3-42c5-a20d-f1bd31522a8b
Change WordPress Login Logo <= 1.1.4 - Stored Cross-Site Scripting
High
1bcc6192-b9fa-4444-b06d-2b44d53d9cfe
WP Elegant Testimonial <= 1.1.6 - Cross-Site Scripting
High
CVE-2020-15142
openapi-python-client Arbitrary Code Generation vulnerability
Low
CVE-2020-15141
Path Traversal in openapi-python-client
Medium
d45a4b0b-bb98-4c35-a743-c434946002a2
Responsive Lightbox2 <= 1.0.2 - Cross-Site Scripting
Medium
969b54d4-50db-4a2f-afa1-e22b29af661e
WordPress Colorbox Lightbox Plugin <= 1.1.4 - Stored Cross-Site Scripting
Medium
8223f9dd-1c2d-40bd-a17d-1bb317829d3b
Sell Photo <= 1.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2020-35935
Advanced Access Manager <= 6.6.1 - Authenticated Authorization Bypass and Privilege Escalation
High
25f782c4-7ece-47cb-9e64-9c93fd8858e9
WordPress fancybox <= 1.0.2 - Stored Cross-Site Scripting
High
CVE-2020-8205
Server-Side Request Forgery in @uppy/companion
High
CVE-2020-22276
WeForms <= 1.4.7 - CSV injection via form entry
High
CVE-2020-24312
WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups
Critical
CVE-2020-17446
Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer
Medium
CVE-2019-6112
Sell Media <= 2.4.1 - Cross-Site Scripting
High
CVE-2020-17495
django-celery-results Stores Sensitive Information In Cleartext
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.