Medium
CVE-2020-8549
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2019-20180
TablePress <= 1.14 - Authenticated (Author+) CSV Injection
Medium
CVE-2019-20173
Login by Auth0 3.11.0 - 3.11.2 - Cross-Site Scripting
Medium
CVE-2020-8498
GistPress < 3.0.2 - Cross-Site Scripting
Medium
CVE-2020-8436
RegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin <= 4.6.0.1 - Cross-Site Scripting
Medium
CVE-2020-8426
Elementor Website Builder <= 2.8.4 - Reflected Cross-Site Scripting
Medium
25dd83c5-2ebe-4976-8e97-650e5eadbe43
Portfolio Gallery – Image Gallery Plugin <= 1.1.2 - Cross-Site Request Forgery
Medium
0e41384f-1dec-418b-be48-fc61def5ca28
Elementor Website Builder <= 2.7.5 - Stored Cross-Site Scripting
High
CVE-2020-8417
Code Snippets <= 2.13.3 - Cross-Site Request Forgery to Remote Code Execution
Critical
CVE-2020-36724
Wordable <= 3.1.1 - Authentication Bypass
Medium
CVE-2020-6850
SAML Single Sign On – SAML SSO Login <= 4.8.83 - Cross-Site Scripting
Medium
CVE-2020-36710
WPS Hide Login <= 1.5.4.2 - Hidden Login Page Location Disclosure
High
4eea120e-839e-4b01-a5a8-af21f5ab99f5
CarSpot – Dealership Wordpress Classified Theme <= 2.2.3 - Insecure Direct Object Reference
Medium
2767fcd9-dfc0-4dfa-83d0-b97c59c2cac2
CarSpot – Dealership Wordpress Classified Theme <= 2.2.3 - Stored Cross-Site Scripting
Medium
b9f5b68f-bf81-4157-920a-f14eb29390a6
Multiple Domain <= 1.0.2 - Cross-Site Scripting
High
d097d918-04dc-4291-bb82-3f5cc8eea158
WP DS FAQ Plus < 1.4.2 - Cross-Site Scripting
High
4b06792e-0b4e-4c1e-b7e9-8cbbae343298
wpCentral <= 1.4.7 - Privilege Escalation
Medium
f70b66ad-55fb-45f8-944a-2c8712071113
Ultimate Addons for Beaver Builder <= 1.24.3 - Cross-Site Scripting
Medium
CVE-2020-7228
Calculated Fields Form <= 1.0.353 - Authenticated Stored Cross-Site Scripting
Critical
CVE-2020-36875
AccessAlly < 3.3.2 - Arbitrary Code Execution
Medium
CVE-2020-7239
Chatbot with IBM Watson < 0.8.21 - Cross-Site Scripting
Medium
CVE-2020-29156
WooCommerce < 4.7.0 - Insecure Direct Object Reference via order_id Parameter
Medium
f373a1d5-3d7e-4a0a-af03-28ca6ce6a170
All-in-One WP Migration <= 7.14 - Unauthenticated Backup Download
Medium
CVE-2020-36729
Slideshow, Image Slider by 2J <= 1.3.31 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.