High
CVE-2020-5642
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2020-28649
Child Theme Creator by Orbisius <= 1.5.1 - Cross-Site Request Forgery to Arbitrary File Modification and Creation
High
CVE-2021-38345
Brizy Page Builder <= 2.3.11 - Incorrect Authorization Checks Allowing Post Modification
High
2f3328c2-290f-410b-a6c8-2825d415f511
Web Instant Messenger <= 1.1.2 and LocalWeb In One <= 1.6.4 - Stored Cross-Site Scripting
High
CVE-2021-24123
PowerPress <= 8.3.7 - Arbitrary File Upload
High
CVE-2021-24377
Autoptimize <= 2.7.7 - Race Condition leading to Remote Code Execution
Medium
CVE-2021-24378
Autoptimize <= 2.7.7 - Unsafe File Upload to Cross-Site Scripting
Critical
CVE-2021-24376
Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import Settings
High
e3a8f554-7cb6-40b7-b83c-819e7785058a
HyperComments <= 1.2.2 - Arbitrary File Deletion
Medium
CVE-2020-28650
WPBakery Page Builder for WordPress <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2020-26596
Elementor Pro <= 3.0.5 - Authenticated Remote Code Execution in Dynamic OOO Widget
High
9f9e5212-caed-46db-bbf2-81c4df88439f
LearnPress – WordPress LMS Plugin <= 3.2.7.2 - SQL Injection
Critical
CVE-2020-26511
WPO365 | LOGIN <= 11.6 - Authentication Bypass
Medium
CVE-2020-36721
Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation
Critical
CVE-2020-36708
Epsilon Framework Themes (Various Versions) - Function Injection
Medium
37f47ce1-0657-414d-a491-99f2722a44f5
BA Book Everything Plugin < 1.3.25 - Cross-Site Scripting and Cross-Frame Scripting
High
CVE-2021-24132
Slider by 10Web <= 1.2.35 - SQL Injection
High
CVE-2020-26876
WP Courses <= 2.0.28 - Improper Access Controls
Medium
CVE-2020-36760
Ocean Extra <=1.6.5 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36755
Customizr <= 4.3.0 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36753
Hueman <= 3.6.3 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36736
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery Bypass
Medium
CVE-2020-36735
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.6.3 - Cross-Site Request Forgery Bypass
Critical
CVE-2020-36706
Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.