High
CVE-2019-12570
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2019-14787
Newsletters <= 4.6.18 - Cross-Site Scripting via contentarea Parameter
High
CVE-2019-12826
Widget Logic < 5.10.2 - Cross-Site Request Forgery
Critical
CVE-2019-13275
WP Statistics <= 12.6.6.1 - Unauthenticated Blind SQL Injection
Critical
CVE-2019-15318
Easy Forms for Mailchimp <= 6.5.2 - Code Injection
High
69f861bf-933f-4413-a5c0-fd39ee78e594
WP Statistics <= 12.6.6.1 - Unauthenticated Stored Cross-Site Scripting via IP Manipulation
High
CVE-2019-14788
Newsletters <= 4.6.18 - Directory Traversal
Medium
CVE-2019-13114
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
Medium
9c5a4705-1bad-4ea9-9102-dc2780a61ac7
Essential Real Estate <= 1.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2019-15842
Easy restaurant menu manager <= 1.1.2 - Cross-Site Scripting
High
aed2ec57-2475-4e77-8219-399cf769ba5a
Watu Quiz 3.1.2.1 - 3.1.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2019-3875
Improper Certificate Validation and Insufficient Verification of Data Authenticity in Keycloak
Medium
ghsa-28hp-fgcr-2r4h
Cross-Site Scripting via JSONP
Medium
ghsa-mxjr-xmcg-fg7w
Arbitrary Code Injection in mobile-icon-resizer
High
CVE-2019-11272
Insufficiently Protected Credentials and Improper Authentication in Spring Security
Medium
CVE-2019-15082
360 Product Rotation < 1.4.8 - Reflected Cross-Site Scripting
High
CVE-2019-15835
WP Better Permalinks < 3.0.5 - Cross-Site Request Forgery
High
CVE-2019-14682
ACF Better Search <= 3.3.0 - Cross-Site Request Forgery
High
CVE-2019-15834
WebP Converter for Media – Convert WebP and AVIF & Optimize Images <= 1.0.2 - Cross-Site Request Forgery
High
07ea9b9b-e28f-484f-9338-8d40f3f8d6d2
Block WP Login <= 1.3.0 - Cross-Site Request Forgery
High
CVE-2019-10072
Improper Locking in Apache Tomcat
Medium
CVE-2017-15694
Argument Injection in Apache Geode server
Medium
CVE-2019-14790
Limb Gallery – Create Beautiful Image & Video Galleries <= 1.3.2 - Cross-Site Scripting
Critical
9c78e0b6-bf24-4a23-8501-b26e681a7a4a
Author Chat <= 1.9.0 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.