Critical
da6eb803-3e2a-4ff1-9b93-6f109e8d0714
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2020-36717
Kali Forms <= 2.1.1 - Cross-Site Request Forgery
High
CVE-2020-36720
Kali Forms <= 2.1.1 - Missing Authorization to Settings Update
High
CVE-2020-36712
Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion
Medium
CVE-2020-35934
Advanced Access Manager <= 6.6.1 - Authenticated Information Disclosure
Medium
CVE-2021-24135
WP Customer Reviews <= 3.4.2 - Multiple Stored Cross-Site Scripting
Medium
CVE-2020-36834
Discount Rules for WooCommerce <= 2.0.2 - Missing Authorization
High
CVE-2020-11497
NAB Transact < 2.1.2 - Payment System Bypass
Medium
da15614b-6619-4ccb-93eb-12923910fb41
Click to top <= 1.2.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2020-35950
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.152 - Cross-Site Request Forgery
High
CVE-2020-35948
Backup, Restore and Migrate WordPress Sites With the XCloner Plugin 4.2.1 - 4.2.12 - Unprotected AJAX Actions
Medium
0512e478-210f-42a9-86ea-a892cd6cfcd1
Internal Links Manager <= 2.1.0 - Multiple Stored Cross-Site Scripting
Medium
fd3d9ce8-0ebf-490e-8c3a-73883638c3eb
NextGEN Gallery Sell Photo <= 1.0.4 - Stored Cross-Site Scripting
Medium
9ddc2f44-e53f-45c2-b293-ad4abc8cff8f
Geo Magazine Theme <= 2.0 - Reflected Cross-Site Scripting
Medium
7def307b-5788-4cb4-82a4-517c5c9fe500
Easy Media Download <= 1.1.4 - Stored Cross-Site Scripting
High
9d1e8703-4ad3-42c5-a20d-f1bd31522a8b
Change WordPress Login Logo <= 1.1.4 - Stored Cross-Site Scripting
High
1bcc6192-b9fa-4444-b06d-2b44d53d9cfe
WP Elegant Testimonial <= 1.1.6 - Cross-Site Scripting
Medium
d45a4b0b-bb98-4c35-a743-c434946002a2
Responsive Lightbox2 <= 1.0.2 - Cross-Site Scripting
Medium
969b54d4-50db-4a2f-afa1-e22b29af661e
WordPress Colorbox Lightbox Plugin <= 1.1.4 - Stored Cross-Site Scripting
Medium
8223f9dd-1c2d-40bd-a17d-1bb317829d3b
Sell Photo <= 1.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2020-35935
Advanced Access Manager <= 6.6.1 - Authenticated Authorization Bypass and Privilege Escalation
High
25f782c4-7ece-47cb-9e64-9c93fd8858e9
WordPress fancybox <= 1.0.2 - Stored Cross-Site Scripting
High
CVE-2020-22276
WeForms <= 1.4.7 - CSV injection via form entry
High
CVE-2020-24312
WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.