Medium
CVE-2020-13864
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2020-12800
Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.3.2 - Arbitrary File Upload
High
CVE-2021-24138
AdRotate < 5.8.4 - Authenticated SQL Injection
Medium
CVE-2022-1169
Careerfy < 3.9.0 - Cross-Site Scripting
High
CVE-2020-36714
Brizy < 1.0.126 - Authorization Bypass to Settings Updates
High
CVE-2022-1168
WP JobSearch < 1.5.1 - Reflected Cross-Site Scripting
Medium
441f5764-eab6-40fe-80cd-65da327b39b2
Newspaper <= 10.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2019-20182
FooGallery <= 1.8.12 - Cross-Site Scripting
High
CVE-2022-1939
Allow SVG Files <= 1.0 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2020-36503
Connections Business Directory <= 9.6 - Authenticated CSV Injection
High
CVE-2021-24137
Blog2Social: Social Media Auto Post & Scheduler <= 6.3.0 - Authenticated SQL Injection
High
CVE-2020-13700
ACF to REST API <= 3.2.0 - Insecure direct object reference via permalinks manipulation
High
CVE-2020-35947
Page Builder: Pagelayer – Drag and Drop website builder <= 1.1.1 - Missing Authorization to Cross-Site Scripting
High
CVE-2020-12675
MapPress Maps <= 2.54.5 - Remote Code Execution via Improper Capability Checks in AJAX Calls
High
CVE-2020-35944
Page Builder: Pagelayer – Drag and Drop website builder <= 1.1.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2020-14962
Final Tiles Gallery <= 3.4.18 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2020-13693
bbPress <= 2.6.4 - Unauthenticated Privilege Escalation
Medium
CVE-2020-13487
bbPress <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting via the forums list table
High
9347dafb-1789-4855-b09e-2a1ef5f7f2c1
Form Maker by 10Web <= 1.13.35 - SQL Injection
Medium
f3b79fab-208f-4354-89ea-508290dcd851
MailerLite – Signup forms <= 1.4.4 - Cross-Site Request Forgery
Critical
ec9cd4a8-286e-43d7-8cb6-6cc363800e20
MailerLite Signup Forms < 1.4.4 - Unauthenticated SQL Injection
Medium
CVE-2021-24127
ThirstyAffiliates Affiliate Link Manager <= 3.9.2 - Stored Cross-Site Scripting
Medium
CVE-2020-8934
Site Kit by Google <= 1.7.1 - Sensitive Information Disclosure
Medium
CVE-2020-13426
multi Scheduler <= 1.0.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.