High
CVE-2019-19109
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2019-19111
wpForo Forum <= 1.6.5 - Cross-Site Scripting via langid parameter
Medium
CVE-2020-8799
WTI Like Post <= 1.4.5 - Stored Cross-Site Scripting
Medium
Exploited in attacks
CVE-2020-11023
jQuery Manager for WordPress <= 1.10.4 & jQuery Migrate Helper <= 1.4.1- Running Vulnerable Dependency
Medium
CVE-2020-11028
WordPress Core < 5.4.1 - Private Post Disclosure
Medium
CVE-2020-11025
WordPress Core < 5.4.1 - Authenticated Cross-Site Scripting via Customizer
Medium
CVE-2020-11029
WordPress Core < 5.4.1 - Reflected Cross Site Scripting
Medium
CVE-2020-11027
WordPress Core < 5.4.1 - Password Reset Link Non-Expiration
Medium
CVE-2020-11030
WordPress Core < 5.4.1 - Cross-Site Scripting in the Block Editor
Medium
CVE-2020-11026
WordPress Core < 5.4.1 - Authenticated (Author+) Cross-Site Scripting via File Uploads
Medium
CVE-2020-12462
Ninja Forms Contact Form <= 3.4.24.1 - Cross-Site Request Forgery leading to Stored Cross-Site Scripting
High
CVE-2020-12104
WordPress WP-Advanced-Search <= 3.3.6 - SQL Injection
Medium
CVE-2020-36699
Quick Page/Post Redirect Plugin <= 5.1.9 - Redirect Security Bypass
High
CVE-2020-13641
Real-Time Find and Replace <= 3.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
2c9f657b-82a5-40da-9e9a-95ea6f62d895
Gmedia Photo Gallery <= 1.18.4 - Cross-Site Scripting
High
76044985-477c-4d62-aec3-1905add0a9e2
Duplicate Page Plugins <= (Various Versions) - SQL Injection
Medium
CVE-2020-36711
Avada <= 6.2.2 - Authenticated (Contributor+) Cross-Site Scripting
Medium
3e2e8dfb-df74-41b7-9b3b-0f5d7b1c545b
YOP Poll <= 6.1.4 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-20628
WP GDPR <= 2.1.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2020-12070
Advanced Woo Search <= 2.00 - Information Disclosure
High
CVE-2020-36697
WP GDPR <= 2.1.1 - Missing Authorization Checks
Medium
CVE-2020-12054
Catch Breadcrumb <= 1.5.4 - Reflected Cross-Site Scripting
High
CVE-2020-36840
Timetable and Event Schedule by MotoPress <= 2.3.8 - Missing Authorization
Medium
CVE-2020-36703
Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.