Critical
CVE-2021-46743
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 77
Reset filters
High
CVE-2022-1091
Safe SVG <= 1.9.9 - Content-Type Bypass
High
CVE-2022-24775
guzzlehttp/psr7 <= 1.84 and 2.0.0-2.1.0 - Improper Input Validation
High
CVE-2022-0254
Zero Spam <= 5.2.10 - Admin+ SQL Injection
Medium
CVE-2022-23638
SVG Support <= 2.5.8 - Stored Cross-Site Scripting via Vulnerability Dependency
Medium
CVE-2021-24374
JetPack <= 9.7 - Information Disclosure
Critical
CVE-2021-29504
Improper Certificate Validation in WP-CLI framework
Medium
CVE-2021-24323
WooCommerce <= 5.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2021-21389
BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API
Critical
CVE-2021-29476
WordPress Core < 5.5.3 - PHP Object Injection Gadget
High
CVE-2020-13700
ACF to REST API <= 3.2.0 - Insecure direct object reference via permalinks manipulation
Critical
CVE-2020-13693
bbPress <= 2.6.4 - Unauthenticated Privilege Escalation
Medium
CVE-2020-13487
bbPress <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting via the forums list table
Medium
Exploited in attacks
CVE-2020-11023
jQuery Manager for WordPress <= 1.10.4 & jQuery Migrate Helper <= 1.4.1- Running Vulnerable Dependency
Medium
CVE-2020-29156
WooCommerce < 4.7.0 - Insecure Direct Object Reference via order_id Parameter
Medium
CVE-2019-14470
UserPro <= 4.9.34 - Reflected Cross-Site Scripting
Medium
CVE-2019-25060
WPGraphQL <= 0.3.4 - Information Exposure
High
CVE-2020-13764
Gravityforms <= 2.4.8 - Information Exposure
Medium
CVE-2018-5362
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[post_type][page]
Medium
CVE-2018-5367
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[post_type][post]
Medium
CVE-2018-5366
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[more_languages]
Medium
CVE-2018-5365
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Request Forgery to Cross-Site Scripting via wpglobus_option[selector_wp_list_pages][show_selector]
Medium
CVE-2018-5364
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[browser_redirect][redirect_by_language]
Medium
CVE-2018-5363
WPGlobus – Multilingual Everything! <= 1.9.6 - Cross-Site Scripting via wpglobus_option[enabled_languages]
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.