Critical
CVE-2020-7048
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2020-7104
Chained Quiz <= 1.1.8.1 - Reflected Cross-Site Scripting
Medium
478b67e3-bd66-4f38-8a37-e677e5db875d
Resim Ara <= 1.0 - Reflected Cross-Site Scripting
Critical
CVE-2020-7047
WP Database Reset <= 3.1 - Privilege Escalation
Medium
CVE-2021-24885
YOP Poll <= 6.1.1 - Reflected Cross-Site Scripting
Medium
19fbb332-f660-4572-82a3-c68e0bc7efcf
ListingPro - WordPress Directory & Listing Theme < 2.5.4 - Cross-Site Scripting
Medium
CVE-2020-7108
LearnDash 3.0.0-3.1.1 - Reflected Cross Site Scripting issue on the [ld_profile] search field
Medium
d5ecb52e-6bf0-4168-b0d7-6972d23c9122
Real Estate 7 WordPress < 2.9.5 - Multiple Vulnerabilities
Critical
CVE-2020-8771
Backup and Staging by WP Time Capsule <= 1.21.15 - Authentication Bypass
Critical
CVE-2020-8772
InfiniteWP Client <= 1.9.4.4 - Authentication Bypass
Medium
602c8145-dcf7-4844-8e54-bc50efa307f4
Contact Form Clean and Simple <= 4.7.0 - Authenticated Stored Cross-Site Scripting
High
c824823c-68d0-4f41-ac22-c517763357eb
Traveler – Travel Booking WordPress Theme < 2.7.8.6 - Cross-Site Scripting
Medium
CVE-2020-6859
Ultimate Member <= 2.1.2 - Insecure Direct Object Reference
Medium
03b1376e-8ef3-4bd2-904b-6819aa21d144
Computer Repair Shop < 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
aae57fed-1003-4b3a-8489-cfc85c250a04
Videos on Admin Dashboard < 1.1.4 - Cross-Site Scripting
Medium
6e54a627-7882-47de-ba36-1c34754bd64a
Houzez <= 1.8.3 - Reflected Cross-Site Scripting
Medium
a3ecc238-1f84-47fd-96b9-753d4b528c47
WooCommerce - Store Exporter <= 2.3.1 - CSV Injection
High
CVE-2020-6167
Minimal Coming Soon & Maintenance Mode <= 2.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Setting Changes
High
CVE-2020-35135
Ultimate Category Excluder <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2020-6166
Minimal Coming Soon & Maintenance Mode <= 2.16 - Missing Authorization to Export Settings/Theme Change
Medium
CVE-2019-20181
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.0.13 - Cross-Site Scripting via post_title
Medium
CVE-2020-7107
Ultimate FAQ <= 1.8.29 - Reflected Cross-Site Scripting
High
dc314c13-4be4-40fc-a035-5de0acb36c91
WP Simple Spreadsheet Fetcher for Google < 0.3.7 - Cross-Site Request Forgery
High
82ce66d0-dc53-4433-b499-30bfd48efaf2
Elegant Themes Divi 3.23 - 4.0.9, Divi Extra 2.23 - 4.0.9, Divi Builder 2.23 - 4.0.9 - PHP Code Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.