Critical
CVE-2019-19634
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
Exploited in attacks
CVE-2020-11738
Duplicator < 1.3.28 - Directory Traversal
Medium
CVE-2019-10772
Sanitizer bypass in svg-sanitizer
Medium
CVE-2020-36854
Async JavaScript <= 2.19.07.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2020-9459
Modern Events Calendar Lite <= 5.1.6 - Missing Authorization to Stored Cross-Site Scripting and Settings Update
High
CVE-2020-36853
10WebMapBuilder <= 1.0.63 - Unauthenticated Stored Cross-Site Scripting via Plugin Settings Change
Medium
CVE-2020-1932
An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed pas
High
CVE-2020-36731
Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update
Medium
CVE-2020-9019
WPJobBoard <= 5.5.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2020-20406
Elementor Website Builder <= 2.9.2 - Stored Cross-Site Scripting
Medium
CVE-2020-9334
Envira Photo Gallery <= 1.7.6 - Authenticated Stored Cross-Site Scripting
High
CVE-2020-9392
Pricing Table by Supsystic <= 1.8.1 - Missing Authorization on AJAX Actions
High
CVE-2020-9393
Pricing Table by Supsystic <= 1.8.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2019-19134
Hero Maps Premium <= 2.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2020-9335
Photo Gallery by 10Web <= 1.5.45 - Multiple Cross-Site Scripting Issues
High
CVE-2020-9394
Pricing Table by Supsystic <= 1.8.1 - Cross-Site Request Forgery to Cross-Site Scripting and Setting Changes
High
ghsa-9r27-994c-4xch
discord-html not escaping HTML code blocks when lacking a language identifier
Medium
CVE-2019-19325
Reflected XSS in SilverStripe
High
CVE-2020-5245
Remote Code Execution (RCE) vulnerability in dropwizard-validation
High
af2d004f-fa9e-4e26-a1e3-03fb31cb95c4
Ultimate Membership Pro <= 8.6.1 - Cross-Site Request Forgery
High
9ecaaa86-9de1-4b90-b6cf-885621cffb19
Ultimate Membership Pro <= 8.6 - Cross-Site Request Forgery
High
CVE-2020-8819
CardGate Payments for WooCommerce <= 3.1.15 - Lack of Origin Validation
High
CVE-2020-7238
HTTP Request Smuggling in Netty
Critical
CVE-2019-20444
HTTP Request Smuggling in Netty
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.