Medium
CVE-2019-17070
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
6fb01045-d38f-469f-8aaf-ff8882132acc
iThemes Sync <= 2.0.17 - Authentication Bypass
Medium
5a9c5f98-3457-443c-a87d-64f9c26b4f79
SoundPress Plugin <= 2.2.0 - Stored Cross-Site Scripting
High
CVE-2019-25214
ShopWP <= 2.0.4 - Missing Authorization to Stored Cross-Site Scripting
Medium
CVE-2019-17239
Download Plugins and Themes from Dashboard <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2017-14760
Event Espresso Free/Lite <= 3.1.37.12.L - Unauthenticated SQL Injection
High
98286172-99b0-43d6-9876-972e270aa19f
Theme Editor <= 2.1 - Cross-Site Request Forgery
Medium
CVE-2019-16931
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Stored Cross-Site Scripting
Critical
CVE-2019-16932
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Server-Side Request Forgery
High
CVE-2019-20360
GiveWP <= 2.5.4 - Authorization Bypass
Medium
CVE-2019-25314
Duplicate Post <= 3.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2019-16524
Easy Fancybox <= 1.8.17 - Authenticated Stored Cross-Site Scripting
High
CVE-2019-25216
Rich Reviews <= 1.7.4 - Stored Cross-Site Scripting
Medium
CVE-2019-25742
Zoner - Real Estate WordPress Theme < 4.2 - Cross-Site Scripting
High
3f0866a4-0edf-4fb7-8628-4b8e18a2b4bb
Simple Fields <= 1.4.11 - Cross-Site Scripting
High
CVE-2019-25146
DELUCKS SEO < 2.1.8 - Stored Cross Site Scripting
High
a5ba9285-9f41-44dd-83c7-e9c377d9de51
WP Google Map Plugin <= 4.0.9 - Cross-Site Request Forgery to PHP Object Injection
Medium
4186fe8d-ca09-4b82-9500-7b16bd10b044
WP MAPS – Easiest & Most Advanced WordPress Plugin for Google Maps <= 4.0.9 - Reflected Cross-Site Scripting
Critical
CVE-2019-17232
Ultimate FAQ <= 1.8.24 - Unauthenticated Options Import/Export
Medium
CVE-2019-17233
Ultimate FAQ <= 1.8.24 - Cross-Site Scripting
Medium
CVE-2019-17228
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated Settings Import/Export
Medium
CVE-2019-17229
Motors – Car Dealer, Classifieds & Listing <= 1.4.0 - Stored Cross-Site Scripting
High
CVE-2020-9466
Export Users to CSV < 1.4 - CSV Injection
High
d5d23fdc-081a-4228-897f-2470a9327887
WooCommerce AJAX Product Filters <= 1.3.6 - Arbitrary Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.