Medium
CVE-2019-20041
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2019-16781
WordPress Core < 5.3.1 - Authenticated Stored Cross-Site Scripting
Critical
ee678085-ce74-4a35-9d90-3b94a3d39a8e
Ultimate Addons for Elementor < 1.20.1 - Authentication Bypass
Critical
CVE-2019-25763
Ultimate Addons for Beaver Builder <= 1.24.0 - Authentication Bypass
High
96288db4-2758-4562-8b26-0523926c9156
Rencontre – Dating Site <= 3.2.2 - Cross-Site Request Forgery
Medium
CVE-2019-19198
Scoutnet Kalender <= 1.1.0 - Cross-Site Scripting
Medium
CVE-2019-19133
CSS Hero <= 4.0.3 - Reflected Cross-Site Scripting
High
CVE-2019-25142
Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update
Medium
CVE-2019-20141
Neon - Bootstrap Admin Theme <= 2.0 - Cross-Site Scripting
Medium
CVE-2019-20043
WordPress Core < 5.3.1 - Authorization Bypass
Medium
CVE-2019-19541
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Stored Cross-Site Scripting
Medium
CVE-2019-19540
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Reflected Cross-Site Scripting
Medium
CVE-2019-19542
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Stored Cross-Site Scripting
High
CVE-2019-19979
WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2019-17550
Blog2Social: Social Media Auto Post & Scheduler < 5.9.0 - Reflected Cross-Site Scripting via b2s_id Parameter
Medium
CVE-2019-19982
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated Option Creation
Medium
CVE-2019-19981
Email Subscribers & Newsletters <= 4.2.2 - Cross-Site Request Forgery on Settings
Medium
CVE-2019-19985
Email Subscribers & Newsletters <= 4.2.2 - Unauthenticated File Download w/ Information Disclosure
Medium
CVE-2019-19980
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization to Test Email
High
CVE-2019-14467
Social Photo Gallery <= 1.0 - Remote Code Execution
Medium
CVE-2019-17599
Quiz And Survey Master <= 6.3.4 - Reflected Cross-Site Scripting
Medium
CVE-2019-19984
Email Subscribers & Newsletters <= 4.2.2 - Missing Authorization
High
CVE-2019-20361
Email Subscribers & Newsletters < 4.3.1 - Unauthenticated Blind SQL Injection
Medium
CVE-2019-17515
Spam protection, AntiSpam, FireWall by CleanTalk <= 5.127.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.