Medium
CVE-2020-9003
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
52d390e0-95ca-4570-8d4c-f679ee86ffea
Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection
Medium
404aabc5-1ff4-492d-8cab-4b83eb68157a
WP All Import Pro < 4.1.1 - Reflected Cross Site Scripting
Medium
CVE-2020-10385
Contact Form by WPForms <= 1.5.8.2 - Stored Cross-Site Scripting
High
CVE-2020-5530
Easy Property Listings < 3.4 - Cross-Site Request Forgery
High
66ddb0f7-4d4c-4c4f-b766-9a07609cd0e5
Fruitful < 3.8.1 - Reflected Cross-Site Scripting
Critical
CVE-2020-9043
wpCentral <= 1.5.0 - Improper Access Control to Privilege Escalation
Critical
CVE-2020-36837
ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset
Critical
CVE-2020-9006
Popup Builder 2.2.8 - 2.6.7.6 - PHP Object Injection
Critical
8fcf7283-eb6c-4fee-b606-79026e2227fc
Profile Builder <= 3.1.0 - Privilege Escalation
High
CVE-2020-8435
RegistrationMagic - Custom Registration Forms, User Registration and User Login Plugin <= 4.6.0.2 - SQL Injection
Medium
CVE-2020-20633
GDPR Cookie Consent & Compliance Notice <= 1.8.2 - Authenticated Stored Cross-Site Scripting and Authorization Bypass
Critical
92915943-c6ff-46df-adbd-382eabe44021
Manage WP Worker <= 4.9.2 - Authentication Bypass
High
CVE-2020-8596
Participants Database <= 1.9.5.5 - SQL Injection
High
CVE-2020-7241
WP Database Backup <= 5.5 - Unauthenticated Information Disclosure
Medium
CVE-2020-36833
Indeed Membership Pro 7.3 - 8.6 - Missing Authorization Checks
Critical
CVE-2020-36832
Indeed Membership Pro 7.3 - 8.6 - Authentication Bypass
High
74b81d31-8ee6-47cf-a5e8-3cf0900ebea0
Events Manager < 5.9.7.2 & Events Manager Pro < 2.6.7.2 - Unauthenticated CSV Injection
High
fc9cb292-94cb-4d1e-a0b7-98856db7c28e
Merge + Minify + Refresh <= 1.10.7 - Cross-Site Request Forgery leading to Arbitrary File Deletion and Site Reset
High
CVE-2020-36836
WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
156e64f2-87a4-40a0-bac8-3dc1f702b0a1
Events Manager <= 5.9.7.1 - CSV Injection
High
CVE-2020-8615
Tutor LMS < 1.5.3 - Cross-Site Request Forgery
Medium
CVE-2020-8594
Ninja Forms Contact Form <= 3.4.22 - Stored Cross-Site Scripting
High
CVE-2020-8658
Htaccess <= 1.8.1 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.