High
CVE-2019-15326
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2019-25147
Pretty Links <= 2.1.9 - Unauthenticated Stored Cross-Site Scripting via track_link
Critical
CVE-2019-15839
Sina Extension for Elementor < 2.2.1 - Local File Inclusion
High
CVE-2019-5979
Personalized WooCommerce Cart Page <= 2.4 - Cross-Site Request Forgery
Low
ghsa-4vr3-9v7h-5f8v
Low severity vulnerability that affects Gw2Sharp
High
d0999244-4097-4e8c-8f7e-4accd7727d69
Dropshix < 4.0.14 - Authorization Bypass
Medium
8b089114-b403-4e42-a578-c1f3b100978f
Cookieless Backend Server Tracking for Google Analytics – WordPress Plugin < 1.2.1 - Cross-Site Scripting
High
CVE-2019-15841
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery allowing Option Update
High
1ed98565-3f86-46c0-a696-13d678f2d523
Rank Math SEO <= 1.0.26 - Cross-Site Scripting
High
CVE-2019-15840
Facebook for WooCommerce <= 1.9.12 - Cross-Site Request Forgery
Medium
edd1396b-02f6-4292-82df-76c5eeecfe20
Facebook Chat Plugin <= 1.2 - Cross-Site Request Forgery to Site Settings Changes
Critical
CVE-2019-12855
Improper Certificate Validation in Twisted
Medium
cad5274f-0d73-425d-bdfb-478c77d55d6c
WordPress Download Manager <= 2.9.96 - Cross-Site Scripting
High
CVE-2019-10270
Ultimate Member <= 2.0.39 - Privilege Escalation
High
dae2d028-6976-468a-9e93-ec712887d657
LionScripts: IP Blocker Lite <= 10.4 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2019-10271
Ultimate Member <= 2.0.39 - Unauthorized Profile Modification
High
ghsa-68gr-cmcp-g3mj
Directory Traversal in lactate
Medium
ghsa-v2p6-4mp7-3r9v
Regular Expression Denial of Service in underscore.string
Critical
ghsa-4vmm-mhcq-4x9j
Sandbox Bypass Leading to Arbitrary Code Execution in constantinople
Critical
ghsa-4qhx-g9wp-g9m6
Failure to sanitize quotes which can lead to sql injection in squel
Medium
CVE-2019-10157
Forced Logout in keycloak-connect
High
ghsa-74cr-77xc-8g6r
Prototype Pollution in @apollo/gateway
High
CVE-2019-5442
XML Entity Expansion in Pippo
Medium
CVE-2019-11269
Open Redirect in Spring Security OAuth
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.